AnaVation

Federal IT engineering services and cybersecurity

Malware Reverse Engineer

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeAnnapolis Junction, MD, USA$94.4k - $217k /yr

About the Job

Requirements

Four or more years of experience in a reverse engineering role.
Four years of experience with programming languages such as C/C++ and Python.
Four years of experience with machine architecture, operating system internals, file systems and memory management, and assembly language (x64, ARM, MIPS).
Proficiency with static and dynamic reverse engineering techniques, including disassembly and decompilation, imports, strings, process monitoring, file system monitoring, network traffic capture, debugging, sandboxing, unpacking, and deobfuscation.
Skill analyzing compiled and interpreted programming languages.
Experience with tools such as IDA Pro, Ghidra, Hopper, Binary Ninja, Frida, PE Explorer, and objdump.
Familiarity with dynamic tools for monitoring malware behavior, including kernel and process debuggers, Process Explorer, and Wireshark.
Familiarity with automated analysis systems such as Cuckoo Sandbox and open-source intelligence resources such as VirusTotal for initial triage and quick identification of well-known malware.
Ability to write detailed technical reports on analysis findings and present reports to stakeholders.
Familiarity with the MITRE ATT&CK framework, tactics, techniques, and procedures, indicators of compromise, and common vulnerabilities and exposures.
Familiarity with threat-sharing platforms such as MISP and threat intelligence interchange standards such as STIX and TAXII.
Must be a U.S. citizen and have SCI within the last two years.

Responsibilities

Perform surface, dynamic, static, manual, and automated analysis on malicious software to determine its nature, capabilities, and potential impact.
Analyze and reverse-engineer compiled executable code to understand its interactions with the environment and determine its function and behavior.
Evaluate malware attack capabilities, including transmission characteristics, attributes, and intended purpose, to understand its threat potential.
Work closely with intelligence professionals to interpret the threat's intentions and capabilities and prepare detailed reports and studies on these findings.
Provide technical expertise on the necessary hardware and software environments for effective malware triage and analysis.

Desired Qualifications

A bachelor's degree or higher in Computer Science, Information Systems, or a related field.
Certified Ethical Hacker (CEH) certification.
Six or more years of experience in a reverse engineering role.
Malware sandbox analysis and forensics experience.
Ability to construct analysis sandboxes and simulate necessary infrastructure for malware samples to execute, such as simulated internet connectivity and DNS resolution.
Ability to perform forensic analysis of sandbox environments to detect changes made by malware during dynamic analysis, including new, deleted, or modified files; changes to system settings, configurations, or registry entries; creation of new user accounts; and open network ports.
Ability to use hex editors to modify malware samples to bypass anti-reversing logic, including logic that detects attached debuggers, virtual environments, or excessive delays in process execution.
Ability to capture network and signal transmissions and analyze their content, including wired and wireless transmissions such as Ethernet, Wi-Fi, Bluetooth, NFC, and radio frequency.
Hardware reverse engineering experience.
Ability to identify components and pathways attached to printed circuit boards, including data and power pathways.
Ability to identify and map chip pinout configurations.
Ability to connect to and monitor signals entering and leaving chips, convert them into binary data, and dump firmware images from hardware devices.
Ability to identify hardware analysis requirements and tooling needs for hardware reverse engineering.
Ability to identify hardware anti-tamper mechanisms to prevent bricking or destruction of devices.
Polygraph within the last five years is preferred.

Salary Range: 94400.47 to 217038.4 (Currency: USD) (Pay period: per-year-salary)

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed:

AnaVation is looking for a talented Malware Reverse Engineer who is passionate about supporting National Security missions. The ideal candidate appreciates partnering with our customer and a group of cybersecurity experts to build environments and analyze the threat actor intent of malware in support of military intelligence missions. This position is full time on-site in Annapolis Junction, Maryland.

Position Responsibilities:

Perform surface, dynamic, static, manual, and automated analysis on malicious software to determine its nature, capabilities, and potential impact. Analyze and reverse-engineer compiled executable code to understand its interactions with the environment and gain intelligence on its function and behavior. Evaluate malware attack capabilities, including transmission characteristics, attributes, and the intended purpose of the software, to understand its threat potential. Work closely with intelligence professionals to interpret the threat's intentions and capabilities and prepare detailed reports and studies on these findings. Additionally, provide technical expertise on the necessary hardware and software environments for effective malware triage and analysis.

Required Qualifications:

Clearance: U.S. Citizen, SCI within last 2 years.

Location: Full time on-site in Annapolis Junction, Maryland.

Experience and knowledge:

Four or more years of experience in a Reverse Engineering role

Four years of experience with program languages such as C/C++ and Python. - Four years of experience with machine architecture, operating system internals, file system and memory management, and assembly language (x64, ARM, MIPS).

Proficient with static and dynamic reverse engineering techniques such as disassembly/decompilation, imports, strings, process monitoring, file system monitoring, network traffic capture, debugging, sandboxing, unpacking and deobfuscation.

Skilled at analyzing compiled and interpreted programming languages.

Experience with tools like IDA Pro, Ghidra, Hopper, Binary Ninja, Frida, PE Explorer, objdump, etc.

Familiar with dynamic tools used for monitoring malware behavior. Experience with tools like kernel and process debuggers, process explorer, Wireshark.

Familiarity with automated analysis systems (e.g. Cuckoo Sandbox) and open-source intelligence resources (e.g. VirusTotal) for initial triage and quick identification of well-known malware.

Ability to write detailed technical reports on analysis findings and to present reports to stakeholders. Familiarity with MITRE ATT&CK framework, TTPs, IOCs, and CVEs to provide standard nomenclature.

Familiarity with threat sharing platforms (MISP) and threat intelligence interchange standards (STIX, TAXII).

Preferred Qualifications:

Clearance: Polygraph within last 5 years

Education: Bachelor's degree or higher in Computer Science, Information Systems, or a related field.

Certification: Certified Ethical Hacker (CEH),

Experience and Knowledge: Six or more years of experience in a Reverse Engineering role.

Malware sandbox analysis and forensics

Ability to construct analysis sandboxes and to simulate necessary infrastructure to enable malware samples to execute (such as simulating Internet connectivity and DNS resolution).

Ability to perform forensic analysis of sandbox environment to detect changes made by the malware sample during dynamic analysis. This includes detecting new, deleted, or modified files, changes to system settings, configurations, or registry entries, creation of new user accounts, open network ports, etc.

Ability to use hex editors to modify malware samples in order to bypass anti-reversing logic. This includes logic that detects attached debuggers, virtual environments, excessive delays in process execution, etc.

Ability to capture network and signals transmissions and to analyze the content of those transmissions. To include wired and wireless transmissions (Ethernet, Wi-Fi, Bluetooth, NFC, RF, etc.).

Hardware reverse engineering.

Ability to identify components and pathways attached to printed circuit boards (data and power).

Ability to identify and map “pin-out” configurations of chips.

Ability to connect to and monitor signals in and out of chips and convert those into binary data, ability to dump firmware images from hardware devices.

Ability to identify hardware analysis requirements and tooling needs for hardware reversing.

Ability to identify hardware anti-tamper mechanisms to prevent bricking or destruction of the device.

Benefits

Generous cost sharing for medical insurance for the employee and dependents
100% company paid dental insurance for employees and dependents
100% company paid long-term and short-term disability insurance
100% company paid vision insurance for employees and dependents
401k plan with generous match and 100% immediate vesting
Competitive Pay
Generous paid leave and holiday package
Tuition and training reimbursement
Life and AD&D Insurance

About AnaVation

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.

If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

About the Company

AnaVation

Federal IT engineering services and cybersecurity

AnaVation provides IT engineering services to the U.S. Federal Government, focusing on complex technical and analytical challenges. It works by delivering contract-based projects that cover intelligence collection and processing, analytical systems, big data solutions, and cybersecurity, using cross-disciplinary engineering teams (called AnaVators) to tailor solutions to government needs. The company differentiates itself through a government-focused, cost-effective approach, deep technical expertise, and a values-driven culture that emphasizes building long-term partnerships and strong customer trust. Its goal is to help federal agencies improve operational efficiency, security, and decision-making by solving difficult technical problems and delivering reliable, mission-critical software and systems.

Company size: 51-200
Company stage: Not listed
Total funding: Not listed
Headquarters: Reston, VA
Founded: 2013

Recently Posted Jobs

Explore more opportunities at AnaVation

See more jobs