Remote Malware Reverse Engineer Lead

company banner
The Judge Group, Inc.
Analyst, Engineer, Security, Web, Systems, Linux, UNIX, VM, Oracle, SQL, DB2, IMS, Engineering, Windows, Python, Bash, System, TCP, IP, SMTP, XML, HTTP, IBM
Full Time
Work from home not available Travel not required

Job Description

Location: Charlotte, NC
Description:
Note: Potentially remote for candidates that possess all of the required skills

We are seeking an experienced Malware Analyst/Reverse Engineer to perform malware analysis and reverse engineering in support of incident response, investigative analysis, threat hunting, and research on existing and emerging cyber threats. The role will involve in-depth analysis of static and behavioral analysis of complex malicious code utilizing various tools, including disassemblers, debuggers, hex editors, un-packers, virtual machines, and network sniffers. The candidate will perform the functions of malware analyst/reverse engineer and serve as a liaison for Threat Services for the Global Fusion Center, and mentor and collaborate with the threat hunting, incident handling/response, and forensics teams.

Key Responsibilities
  • Use expertise in malware analysis/reverse engineering to evaluate and analyze complex malicious code.
  • Perform reverse-engineering for suspected or known malware files, determining the TTPs associated with the code.
  • Develop custom tools designed to automate analysis.
  • Perform research around malicious software, vulnerabilities, and exploitation tactics, and recommend preventative or defensive actions.
  • Produce detailed reports identifying attributes and functionality of malware, and IOCs that can be used for malware identification/detection, to include behavior, identified infrastructure used for command and control, and mitigation techniques.
  • Assist in identifying (hunting) and profiling threat actors and TTPs.
  • Develop host and network based signatures to identify specific malware via heuristic and/or anomaly based detection methods.
  • Participate in formal technical briefing and proposals.
  • Perform as an Information Security SME in the several of the following areas:
  • Malicius code behavior
  • Threat Intelligence
  • Incident Respnse
  • Web Applicatin
  • Lg analysis (statistical modeling, correlation, pattern recognition, etc.Microsoft platform (Server, workstation, applications)
  • Key Responsibilities (Cont'd)
  • Open Systems platfrms (Linux, UNIX, VM Ware ESX)
  • Netwrking (firewalls, IDS/IPS, packet capture)
  • Databases (Oracle, SQL Server, DB2, IMS)


  • Providing mentorship and support to teammates regarding malicious file analysis/behavior, communication/rapport with other divisions and various levels of leadership, technical expertise, and career development.
  • Capable of identifying need & driving solutions, and providing guidance, in an autonomous manner.


Job Qualifications
  • Bachelors and/or Masters Degree in Engineering, Computers Science, or related field
  • 7+ years overall technical experience in either reverse engineering/malware analysis, threat intelligence, incident response, security operations, or related information security field.
  • 5+ years experience in application design/engineering, including but not limited to programming/scripting, Windows/Linux system administration, RDBMS/NoSQL database administration, etc.
  • 2+ years experience in penetration testing or ethical hacking
  • 2+ years experience with reverse engineering tools like IDA Pro, Ghidra, OllyDbg, Windbg, and Wireshark.
  • 2+ years experience of Python scripting to automate analysis and reverse engineering tasks (and Bash or Powershell or PerlC/C++).
  • 2+ years experience of x86, ARM, and x64 architectures.
  • Ability to reverse engineer binaries of various types including: x86, x64, C, C++, and .NET.
  • Strong understanding of Windows Operating System Internals, Windows APIs, and writing and analyzing DLLs.
  • Recent experience developing custom software and hardware tools to assist in performing reverse engineering and vulnerability analysis.
  • Strong understanding of common network and application stack protocols, including but not limited to TCP/IP, SMTP, DNS, TLS, XML, HTTP, etc.


Experience with security operations tools, including but not limited to:
  • SIEM (e.g. Splunk, ArcSight)
  • Indicatr management (e.g. ThreatConnect)
  • Link/relatinship analysis (e.g. Maltego, IBM i2 Analyst Notebook)
  • Signature develpment/management (e.g. Snort rules, Yara rules)

Contact: asingh3@judge.com

This job and many more are available through The Judge Group. Find us on the web at www.judge.com


Company Information

The Judge Group is a privately-owned, leading professional services firm. What does that mean? It means we provide technology, talent and learning solutions to businesses around the globe, and we're great at it. Our expertise is positioned at the crossroads of people and technology—two of the most important aspects of successful business today.
Dice Id : cxjudgpa
Position Id : 626749
Originally Posted : 2 months ago

Similar Positions at The Judge Group, Inc.

Remote Malware Reverse Engineer
  • Charlotte, NC
  • 22 hours ago
Tier 2 Linux Systems Engineer
  • Charlotte, NC
  • 22 hours ago
MS Azure Engineer
  • Rosemont, IL
  • 22 hours ago
API Engineer
  • Media, PA
  • 22 hours ago
Technical Solutions Engineer
  • Redmond, WA
  • 22 hours ago
Linux - Unix System Admin / Engineer
  • Edmundson, MO
  • 22 hours ago