Malware Analyst

For Malware + RE:

Required Skills:

• Olly DBG, IDA PRO, Static and dynamic malware analysis, PE and non-PE file analysis.

Here are the some of the key skills which we are looking for it:

• Static and dynamic malware analysis(aware of file structure like, PE, PDF, OLE, windows short cut files etc...)
• someone who has hands on writing signatures for malware samples(at-least initial vector malware).
• Aware of trending malware family campaign and analysis for threat write ups for that follow up family. (example malware family - Emotet/Qakbot/AgentTesla etc..)
• Email security and Endpoint Security (EOP)
• Investigating the Phishing campaign and spam emails which users have received and reported.
• Threat Intelligence analysis/ Threat hunting
• Analyzing PE files (Dynamic and static analysis) and providing detection for malicious PE files.(RE/Malware Analysis)
• Analyzing non-PE files (like OLE / PDF / HTML / HTA / VBS|VBE /JS/ WSF/JAR/LNK) andproviding detection for malicious files.
• Malware Analysis and Reversing.
• Reverse Engineering skills: familiar with debuggers, disassemblers, network protocols, file formats, sandboxes, hardware/firmware internals, software communication mechanisms, Classification, clustering and labelling of Malware.
• Knowledge of Advanced Techniques of Malware Analysis.
• Knowledge of Malware kill chain and MITRE ATT&CK techniques and tactics.
• Knowledge of AV evasion techniques and Pen testing tools like - Veil (equal rank), PowerShell Empire, Meterpreter, Unicorn, Cactus Torch, and Any other similar tools
• Additionally, Experience with advanced persistent threats, human adversary compromises and incident response.
• Excellent cross-group and interpersonal skills, with the ability to articulate business need for detection improvements.
• Excellent analytical skills and ability to identify patterns and trends.
• Strong research skills, data knowledge, and ability to analyze and present complex data in a meaningful way.
• Strong understanding of Cyber Security, modern security problems and threat landscape, Operating Systems (internals), computer networking concepts.