Description:
Education: Bachelors/HD
The analyst shall provide support for incident response activities, intrusion events, and other technical analysis as needed, and works with other cyber defense tears to achieve the mission goals. The Malware Analyst researches, evaluates, develops, tests, and applies new methodologies for analyzing digital artifacts to improve the capabilities of the team, supports and/or develops procedures and standards, and delivers advice, direction and education to another staff.
Competencies Required:
- Understanding of, and demonstrated ability with, static and dynamic analysis tools and techniques (commercial solutions and custom code) such as debuggers, disassemblers (e.g. IDA Pro, Olly@B, etc.) alignment with job/unit
- Experience with numerous programming languages (lava, C, CH, NET, etc.) requirements
- Experience with various architectures [×86, ARM, x64)
- Use of Python or other scripting language to automate analysis or reverse engineering tasks
- Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSi model, defense-in-depth, and common security elements.
- Cyber Security experience (Protect, Detect, Respond and Sustain) within a computer incident response organization or a large security operations center (corporate or govt.)
- Demonstrated understanding of the life cycle of network threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques, and procedures (FTPs).
- Demonstrated hands-on experience analyzing high volumes of logs, network data [e.g. Net Flow, full packet capture), and other attack artifacts in support of incident investigations.
- Knowledge of incident management process.
- Knowledge of iT security best practices, common attack types and detection / prevention methods.
- Motivated self-starter with demonstrated strong written and verbal communication skills.