Sr. Forensic Malware Analyst
$150,000–$200,000 year
On-siteSan Antonio, Texas, United States
Job Summary
Conduct forensic malware analysis, memory forensics, and hard drive examinations to verify system compromises and develop indicators of compromise. Document all findings in the investigation/incident log with no more than a 5% error rate while maintaining strict chain of custody records for evidence intake and laboratory release. Utilize tools such as EnCase, FTK, and FireEye to analyze metadata, perform malware reverse engineering, and support incident response deployments with same-day notice. Collaborate with leadership, external agencies, and incident responders to investigate network intrusions and provide technical support to law enforcement and counter-intelligence activities. Generate clear forensic reports and synopses for technical and non-technical audiences while mentoring personnel and updating continuity folders quarterly.
Required Qualifications
- DoDD 8570.01‐M/8140.01 I AT Level III CND
- Active TS/SCI
- More than five (5) years of experience as a Forensic Malware Technician
- Experience performing forensic acquisition and examination of Windows, Unix/Linux, and Macintosh‐based computers and servers
- Strong skill in and a strong understanding of: the use of a variety of forensic tools (Access Data, FTK, Guidance EnCase; including mobility (Axiom/BlackBag , Mobilyze/Cellebrite/Paraben and in, FTK, X‐Ways Forensics, FireEye, Volatility, Sleuthkit, BlackBag tools) and various Open Source forensic tools
- Very proficient w/ malware analysis, sandboxing, and software reverse engineering
- Proficient Experience with scripting languages such as Python and PowerShell
- Extensive knowledge of MITRE ATT&CK framework, and its uses within the cybersecurity community (e.g., Open Source projects)
- SANS GCFA (or equivalent)
Desired Qualifications
- Shell Scripting is a plus
- Experience writing intelligence and technical articles for production and dissemination
- GREM, GCTI and/or ACE
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.