malware analyst

RealmOne

<div>RealmOne was built on the principle that people matter first and foremost. We believe in providing a strong work/life balance by investing in our employees and encouraging professional and personal growth. We do this by offering exceptional benefits, flexible schedules, and the tools necessary to achieve success through paid training, mentoring, and the opportunity to work alongside top-notch industry professionals.

Join us on this journey as we execute this mission-critical contract providing high-end analytics and data science services within the REALM of cybersecurity.

Your effort and expertise are crucial to the success and execution of this impactful mission that is critical in ensuring mission success through Security Engineering, Risk Management and Assessment, and Insider Threat Analysis, by improving, protecting, and defending our Nation&rsquo;s Security.

Job Description:
<ul>
<li>Support clients in solving difficult problems by providing recommendations based on the results of malicious code analysis. Analyze and evaluate malicious code to create technical reports for indicators of compromise and to recommend mitigation and detection actions. Work to continually improve current malware analysis techniques and identify new ways to improve malware identification best practices. Conduct research and training on comprehending emerging malicious code threats.</li>
</ul>
The Level 2 Malware Analyst shall possess the following capabilities:
<ul>
<li>Conduct both dynamic and static analysis of suspicious code in order to establish malicious capability and determine potential impact.</li>
<li>Experience with host and network monitoring for analysis of malware execution &amp; propagation methodologies.</li>
<li>Perform analysis on captured data, such as audit, log, network traffic, et cetera, to identify any intrusion-related artifacts.</li>
<li>Understanding of operating system-specific exploitation vectors.</li>
<li>Analyze malicious code by employing tools, scripting languages, and leveraging virtual machines/environments.</li>
<li>Support 24/7 monitoring of malware threats to government networks, hosts, mission platforms, and boundaries.</li>
<li>Generate documentation of vulnerabilities and exploits used by malware in written reports.</li>
<li>Communicate written and verbal information in a timely, clear, and concise manner.</li>
<li>Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).</li>
<li>Generate technical summary of findings in accordance with established reporting procedures.</li>
<li>Develop and recommend mitigation strategies.</li>
<li>Develop signatures, techniques, and rules to identify malware vectors.</li>
<li>Collaborate with internal and external organizations to discover new threats, develop mitigation techniques, processes, and tools which further the CSSP mission, as directed by the customer.</li>
<li>Evaluate emerging threats.</li>
</ul>
Qualifications:
<ul>
<li>Five (5) years of demonstrated experience in cybersecurity.</li>
<li>Three (3) years of demonstrated experience with malware analysis.</li>
<li>Two (2) years of demonstrated experience with tools such as GHIDRA, SYSInternals, FireEye AX, or similar technologies.</li>
<li>One (1) year of demonstrated experience with development of code in languages such as Python, Lua, C/C++, Ruby or similar</li>
<li>No Degree Required</li>
<li>Night Shift, Sunday &ndash; Wednesday</li>
</ul>
Certifications Required:
<ul>
<li>DoD 8570 Compliance with CSSP Analyst baseline</li>
<li>IAT level II or III certification</li>
<li>Computing Environment (CE) Cert</li>
<li>Global Information Assurances Cert (GIAC) Certified Fornsic Analyst (GCFA) cert or Certified Reverse Engineering Malware (GREM) cert</li>
<li>Splunk Fundamentals I software training course</li>
</ul>
Position requires active Security Clearance with appropriate Polygraph
Pay Range: 185,000-235,000
<div>The RealmOne pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Our approach to crafting offers considers various factors to establish an equitable and competitive compensation package. These considerations include, but are not limited to, the extent and intricacy of the role&rsquo;s responsibilities, the candidate&rsquo;s educational background, their work experience, and the specific competencies crucial for success in the role.

RealmOne Benefits:
<ul>
<li>Healthcare Coverage + Insurance: Medical: Three (3) rich healthcare options through CareFirst with 100% or majority company-paid premiums. Tax-advantaged health savings account available with generous employer contribution. Dental + Vision: 100% employer-paid for employees and family, with a buy-up option available.</li>
<li>Retirement + Savings: 401K &ndash; 10% TOTAL CONTRIBUTION &ndash; 5% safe harbor &ndash; 5% annual profit share (both immediately vested!).</li>
<li>Paid Time Off + More: 4 weeks starting PTO &ndash; 11 federal holidays + 2 floating holidays &ndash; Paid hours for company-required training.</li>
<li>Career Growth + Development: Access to FREE 24/7 learning via Udemy &ndash; Opportunities to participate in tech councils, industry initiatives, etc. &ndash; $7,500 annual Educational &amp; Professional Development Assistance.</li>
<li>MORE BENEFITS&hellip;FOR EVERY LIFESTYLE! &ndash; Paid parental leave &ndash; Adoption assistance &ndash; Annual swag drops &ndash; Flexible work schedules -Generous referral bonus program &ndash; Employee appreciation + family-friendly corporate events &hellip;and much more.</li>
</ul>
ABOUT US
<ul>
<li>RealmOne is a mid-sized science and technology company dedicated to solving our customers&rsquo; toughest mission challenges.</li>
<li>Headquartered in Columbia, MD., RealmOne supplies advanced cybersecurity, data science, and software engineering services and products to customers in the Government and commercial sectors.</li>
<li>RealmOne delivers encompassing mission assurance and critical systems support to government customers across various U.S. locations to include Colorado, Georgia, Hawaii, Texas, Utah, and Virginia.</li>
<li>RealmOne has won numerous awards, including Top Workplaces by the Baltimore Sun. Across more than 20 prime contracts, RealmOne is a premier innovator for the Government and Department of Defense, and our team is located across the United States.</li></ul></div></div><div></div>

Malware Analyst 2

Booz Allen Hamilton

<div>Malware Analyst
The Opportunity:
As a security operations center analyst, you&rsquo;re in the middle of the action, responding to and mitigating threats in real time. You&rsquo;re the first line of cyber defense for your organization, and they look to you for guidance on best practices and security measures. We need a SOC analyst like you to help us secure critical infrastructure from the constant onslaught of cyber attacks.
As an SOC analyst on our team, you&rsquo;ll develop network defense skills as you learn to monitor, detect, and analyze threats by interacting directly with affected users and state-of-the-art tools and technologies.
When an incident is detected, you&rsquo;ll work with the team to collect data to help incident response understand and mitigate the threat. You&rsquo;ll analyze alerts to figure out just how many systems are affected and initiate recovery efforts. You&rsquo;ll contribute to assessments and learn how to analyze patterns to understand attackers&rsquo; goals to stop them from succeeding. This is a great opportunity to hone your cybersecurity skills and learn more about threat assessment and incident response.
Work with us as we defend against malicious actors.
Join us. The world can&rsquo;t wait.
You Have:<ul><li>
4+ years of experience in a SOC, incident response, or cyber threat analysis role</li><li>
Experience in analyzing logs, network traffic, digital forensics, malware analysis, threat intelligence, and cybersecurity</li><li>
Experience with incident response frameworks, such as NIST or MITRE ATT&amp;CK</li><li>
Knowledge of SIEM, such as Splunk, Elastic, QRadar, or Sentinel, EDR, such as CrowdStrike or Microsoft Defender, IDS, and IPS</li><li>
Knowledge of operating system-specific exploitation vectors</li><li>
TS/SCI clearance</li><li>
Bachelor&rsquo;s degree in Cybersecurity or Information Technology and 5+ years of experience in Cybersecurity, or 10+ years of experience in Cybersecurity in lieu of a degree</li><li>
DoD 8140 Level II Certification, such as Security+, CySA+, or CISSP</li><li>
GCIH, GCIA, CEH, or CISSP Certification</li></ul>
Nice If You Have:<ul><li>
Experience supporting Air Force or DoD Cyber Protection Teams (CPTs) or cyber threat intelligence missions
</li><li>Experience in malware classification, unpacking, and behavioral analysis</li><li>
Experience developing custom scripts and automation in Python or PowerShell for analysis workflows</li><li>
Knowledge of adversary TTPs and frameworks such as MITRE ATT&amp;CK and CAPEC</li><li>
Knowledge of cyber kill chain methodologies</li><li>
Master&rsquo;s degree in Cybersecurity, Computer Engineering, or Digital Forensics</li><li>
GREM, GCFA, or OSCP Certification</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $55,300.00 to $126,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Malware Analyst

United Sol (Pvt.) Ltd

Research, analyze, and reverse-engineer malicious code to produce detections, mitigation guidance, and threat intelligence for enterprise protection.Responsibilities<ul><li>Analyze samples (static/dynamic) to determine behavior, persistence, and indicators of compromise.</li><li>Develop signatures, YARA rules, and detection content for endpoint and network tools.</li><li>Produce concise technical reports and IOC packages for incident response teams.</li><li>Feed findings into threat intelligence and help improve defensive controls.</li></ul>Required<ul><li>3+ years in malware analysis, incident response, or threat research.</li><li>Comfortable with reverse-engineering tools and analysis workflows (no requirement to author malicious tools).</li><li>Strong Windows and/or Linux internals knowledge and scripting ability (Python, PowerShell, etc.).</li><li>Degree in relevant field or equivalent experience.</li></ul>Desired<ul><li>Experience with sandboxing platforms, YARA, and public threat intelligence platforms.</li><li>Certification such as GIAC Reverse Engineering Malware (GREM) is a plus.</li></ul>EthicsRole is strictly defensively focused; all analysis conducted for protection, detection, and lawful response.Job Type: Full-timeWork Location: In person

Malware Research & Defensive Analyst (Reverse Engineering)

Dicetek LLC

<div>
 
 Job Title: Secure Software Engineer &amp; Reverse Engineering Specialist
 
 
 
 
 Position Summary
 
 
 
 We are looking for a highly skilled Secure Software Engineer &amp; Reverse Engineering Specialist with deep expertise in backend development, software
 
 
 architecture, and security analysis. The ideal candidate combines excellent programming and system design skills with the ability to reverse engineer complex applications, identify vulnerabilities, and communicate findings effectively to both technical and non-technical stakeholders.
 
 
 This role bridges secure software development, reverse engineering, and cyber threat analysis, ensuring the creation and protection of resilient systems across the organization.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Design, develop, and maintain secure backend systems and APIs, ensuring scalability, performance, and compliance with security best practices.
 </li>
 <li>
 Perform reverse engineering of binaries, applications, and services to identify vulnerabilities, security flaws, and malicious code.
 </li>
 <li>
 Collaborate with cross-functional teams to integrate security into the development lifecycle, from design to deployment.
 </li>
 <li>
 Build custom automation tools and scripts to assist in vulnerability assessment, debugging, and threat analysis.
 </li>
 <li>
 Conduct static and dynamic code analysis to detect insecure coding practices and improve overall application robustness.
 </li>
 <li>
 Work closely with incident response and SOC teams to analyze malware, exploits, and suspicious binaries.
 </li>
 <li>
 Produce clear, well-documented technical reports, architecture diagrams, and remediation recommendations.
 </li>
 <li>
 Communicate complex findings effectively to engineers, management, and non-technical stakeholders.
 
 
 </li>
 </ul>
 
 Job Requirements
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Software Engineering, Cybersecurity, or related technical discipline.
 </li>
 <li>
 Strong backend development expertise using technologies such as Python, Java, C#, Go, or Node.js.
 </li>
 <li>
 Proven experience with database management and backend frameworks, including Django, Flask, Spring Boot, Express, or FastAPI.
 </li>
 <li>
 Advanced reverse engineering skills using tools such as IDA Pro, Ghidra, Binary Ninja, or Radare2.
 </li>
 <li>
 Deep understanding of software vulnerabilities, exploit techniques, and secure software design principles.
 </li>
 <li>
 Solid understanding of RESTful API design, microservices, and containerized environments (Docker, Kubernetes).
 </li>
 <li>
 Excellent written and verbal communication skills, capable of delivering precise documentation and briefings to both technical and executive audiences.
 </li>
 <li>
 Familiarity with version control (Git), CI/CD pipelines, and DevSecOps practices.
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Experience with malware analysis, threat intelligence, or security automation frameworks.
 </li>
 <li>
 Knowledge of cloud environments (AWS, Azure, GCP) and their security configurations.
 </li>
 <li>
 Familiarity with network protocols, memory forensics, and kernel-level debugging.
 </li>
 <li>
 Relevant certifications such as GREM, OSCP, CISSP, GCFA, or CEH are a strong plus.
 
 
 </li>
 </ul>
 
 Key Competencies
 
 
 
 <ul>
 <li>
 Excellent backend programming and problem-solving skills.
 </li>
 <li>
 Strong analytical mindset with attention to detail.
 </li>
 <li>
 Ability to translate complex technical findings into actionable solutions.
 </li>
 <li>
 Collaborative, self-driven, and capable of thriving in fast-paced, high-stakes environments.
 </li>
 </ul>
</div>

Secure Software Engineer & Reverse Engineering Specialist

Nets-international Communication

Job SummaryThe SOC L1 Analyst is the first line of defense in cybersecurity operations. They are responsible for monitoring, detecting, and logging potential threats using security tools and alerting systems. The L1 Analyst performs initial triage and escalation of suspicious activity to higher levels.Key Responsibilities<ul><li>Monitor SIEM (Security Information &amp; Event Management) tools for alerts and anomalies.</li><li>Perform initial investigation and triage on security events.</li><li>Escalate confirmed or critical incidents to SOC L2.</li><li>Document incidents in ticketing systems (e.g., ServiceNow, JIRA).</li><li>Maintain logs and daily reports for incident trends.</li><li>Monitor firewalls, IDS/IPS, EDR, and antivirus systems for suspicious behavior.</li><li>Assist in phishing investigations and malware alert review.</li><li>Follow standard incident response playbooks.</li><li>Participate in shift-based 24/7 monitoring.</li></ul>Skills &amp; Knowledge<ul><li>Understanding of networking fundamentals (TCP/IP, DNS, ports, protocols).</li><li>Basic knowledge of Windows/Linux systems and security logs.</li><li>Familiarity with SIEM tools (e.g., Splunk, QRadar, Azure Sentinel).</li><li>Strong analytical and documentation skills.</li><li>Ability to work under pressure and escalate issues promptly.</li></ul>Education &amp; Certifications<ul><li>Diploma/Bachelor&rsquo;s in Cybersecurity, IT, or Computer Science.</li><li>Preferred: CompTIA Security+, EC-Council CSA, Microsoft SC-900 / SC-200, Cisco CyberOps Associate.</li><li>3 years of experience in cybersecurity or IT monitoring.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>Muscat: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Security Operation Centre L1: 3 years (Required)</li></ul>

Security Operation Centre L1

Road and Transport, RTA Dubai

Job Title Information Security Analyst - Roads and Transport Authority Dubai Job Description Information Security Analyst - Roads and Transport Authority Dubai Job Location: Dubai, United Arab Emirates Industry: Government Administration Function: Cyber security Gender: Any Candidate Nationality: All Nationalities (Priority for UAE Nationals) Job Type: Full-time Position Overview The Roads and Transport Authority (RTA) in Dubai is hiring an experienced Information Security Analyst to strengthen its cybersecurity framework. This role focuses on implementing security measures, ensuring compliance with international standards, and protecting critical information assets within the organization. What You ll Do * Identify, recommend, and implement corrective actions in response to security violations * Conduct vulnerability research and recommend remediation plans * Analyze and test security controls for compliance with ISO27001, ISR, and other regulations * Perform security assessments to identify vulnerabilities in systems and applications * Monitor, analyze, and escalate security events from incident response queues * Create and maintain IT security standard operating procedures and configuration reports * Conduct technical analysis of malware, intrusion attempts, and system logs * Provide guidance on authentication and access systems aligned with security architecture requirements * Develop and maintain security policies, standards, and procedures to protect information assets * Support IT security awareness programs and assist with staff training initiatives * Perform continuous risk assessments and ensure ongoing compliance with standards * Collaborate with teams to ensure effective incident response and implement best practices Ideal Profile * Bachelor s degree in Computer Science, IT, or Business Administration from a recognized university * Minimum of 3 years of relevant experience in IT security or related fields * Preferred certifications: CISSP, CISM, CISA, GIAC * Working knowledge of ISO27001, ISR, ethical hacking, and penetration testing * Strong project management and analytical skills * Excellent communication and interpersonal abilities * Ability to adapt to multicultural environments and manage multiple priorities effectively

Information Security Analyst - Roads and Transport Authority

Job Title Information Security Analyst - Roads and Transport Authority Dubai Job Description Information Security Analyst - Roads and Transport Authority Dubai Job Location: Dubai, United Arab Emirates Industry: Government Administration Function: Cyber security Gender: Any Candidate Nationality: All Nationalities (Priority for UAE Nationals) Job Type: Full-time Position Overview The Roads and Transport Authority (RTA) in Dubai is hiring an experienced Information Security Analyst to strengthen its cybersecurity framework. This role focuses on implementing security measures, ensuring compliance with international standards, and protecting critical information assets within the organization. What You ll Do * Identify, recommend, and implement corrective actions in response to security violations * Conduct vulnerability research and recommend remediation plans * Analyze and test security controls for compliance with ISO27001, ISR, and other regulations * Perform security assessments to identify vulnerabilities in systems and applications * Monitor, analyze, and escalate security events from incident response queues * Create and maintain IT security standard operating procedures and configuration reports * Conduct technical analysis of malware, intrusion attempts, and system logs * Provide guidance on authentication and access systems aligned with security architecture requirements * Develop and maintain security policies, standards, and procedures to protect information assets * Support IT security awareness programs and assist with staff training initiatives * Perform continuous risk assessments and ensure ongoing compliance with standards * Collaborate with teams to ensure effective incident response and implement best practices Ideal Profile * Bachelor s degree in Computer Science, IT, or Business Administration from a recognized university * Minimum of 3 years of relevant experience in IT security or related fields * Preferred certifications: CISSP, CISM, CISA, GIAC * Working knowledge of ISO27001, ISR, ethical hacking, and penetration testing * Strong project management and analytical skills * Excellent communication and interpersonal abilities * Ability to adapt to multicultural environments and manage multiple priorities effectively

Information Security Analyst

Search 2933+ Malware analyst jobs near you this November. New roles added regularly across leading industries. Apply today.