2 months ago
Annapolis Junction, MD, USAMid Level
Responsibilities
- Perform static and dynamic malware reverse engineering, including disassembly, decompilation, debugging, unpacking, deobfuscation, process monitoring, filesystem monitoring, and network traffic capture.
- Analyze compiled and interpreted programming languages, machine architecture, operating-system internals, filesystems, memory management, and assembly code.
- Use reverse-engineering, debugging, sandboxing, and malware-analysis tools to identify and understand malicious behavior.
- Construct analysis sandboxes and simulate infrastructure such as Internet connectivity and DNS resolution so malware samples can execute.
- Conduct forensic analysis of sandbox environments to identify file, configuration, registry, account, port, and other system changes.
- Modify malware samples with hex editors to bypass anti-reversing logic involving debuggers, virtual environments, execution delays, and related controls.
- Capture and analyze wired and wireless signals and network transmissions, including Ethernet, Wi-Fi, Bluetooth, NFC, and RF transmissions.
- Write detailed technical reports and present analysis findings to stakeholders using standardized threat terminology.
- Perform hardware reverse engineering, including mapping circuit-board pathways and chip pinouts, monitoring chip signals, dumping firmware, and identifying anti-tamper mechanisms.
Requirements
- U.S. citizenship and SCI clearance held within the last two years are required.
- Full-time, on-site work in Annapolis Junction, Maryland is required.
- At least four years of experience in a reverse-engineering role is required.
- Four years of experience with C/C++ and Python is required.
- Four years of experience with machine architecture, operating-system internals, filesystems, memory management, and assembly languages or architectures including x64, ARM, and MIPS is required.
- Proficiency with static and dynamic reverse-engineering techniques is required.
- Experience with malware-analysis, debugging, process-monitoring, network-analysis, sandboxing, and threat-intelligence tools is required or preferred as specified in the posting.
- Familiarity with MITRE ATT&CK, TTPs, IOCs, CVEs, MISP, STIX, and TAXII is required.
- A polygraph completed within the last five years is preferred.
- A bachelor's degree or higher in Computer Science, Information Systems, or a related field is preferred.
- Certified Ethical Hacker certification is preferred.
- Six or more years of reverse-engineering experience, malware sandbox analysis, and malware forensics are preferred.
- Experience with hardware reverse engineering, firmware extraction, signal analysis, and hardware anti-tamper mechanisms is preferred.
Benefits
- Medical insurance with company cost sharing for employees and dependents.
- Company-paid dental insurance for employees and dependents.
- Company-paid short-term and long-term disability insurance.
- Company-paid vision insurance for employees and dependents.
- 401(k) plan with a generous match and immediate vesting.
- Paid leave and holiday package.
- Tuition and training reimbursement.
- Life and AD&D insurance.
- Full-time, on-site work in Annapolis Junction, Maryland.
About AnaVation
AnaVation provides cybersecurity, software, cloud, and data engineering services to U.S. government customers, particularly the federal intelligence community. The company builds and supports cyber collection and processing systems, SOC/incident response capabilities, and big-data and cloud infrastructure used across multiple agencies, including AWS-based environments. Founded in 2013 and headquartered in Chantilly, Virginia, AnaVation is a private partnership focused on complex government programs.