Malware Analyst 2

RealmOne was built on the principle that people matter first and foremost. We believe in providing a strong work/life balance by investing in our employees and encouraging professional and personal growth. We do this by offering exceptional benefits, flexible schedules, and the tools necessary to achieve success through paid training, mentoring, and the opportunity to work alongside top-notch industry professionals.

Join us on this journey as we execute this mission-critical contract providing high-end analytics and data science services within the REALM of cybersecurity.

Your effort and expertise are crucial to the success and execution of this impactful mission that is critical in ensuring mission success through Security Engineering, Risk Management and Assessment, and Insider Threat Analysis, by improving, protecting, and defending our Nation's Security.

Job Description:

• Support clients in solving difficult problems by providing recommendations based on the results of malicious code analysis. Analyze and evaluate malicious code to create technical reports for indicators of compromise and to recommend mitigation and detection actions. Work to continually improve current malware analysis techniques and identify new ways to improve malware identification best practices. Conduct research and training on comprehending emerging malicious code threats.

The Level 2 Malware Analyst shall possess the following capabilities:

• Conduct both dynamic and static analysis of suspicious code in order to establish malicious capability and determine potential impact.
• Experience with host and network monitoring for analysis of malware execution & propagation methodologies.
• Perform analysis on captured data, such as audit, log, network traffic, et cetera, to identify any intrusion-related artifacts.
• Understanding of operating system-specific exploitation vectors.
• Analyze malicious code by employing tools, scripting languages, and leveraging virtual machines/environments.
• Support 24/7 monitoring of malware threats to government networks, hosts, mission platforms, and boundaries.
• Generate documentation of vulnerabilities and exploits used by malware in written reports.
• Communicate written and verbal information in a timely, clear, and concise manner.
• Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Generate technical summary of findings in accordance with established reporting procedures.
• Develop and recommend mitigation strategies.
• Develop signatures, techniques, and rules to identify malware vectors.
• Collaborate with internal and external organizations to discover new threats, develop mitigation techniques, processes, and tools which further the CSSP mission, as directed by the customer.
• Evaluate emerging threats.

Qualifications:

• Five (5) years of demonstrated experience in cybersecurity.
• Three (3) years of demonstrated experience with malware analysis.
• Two (2) years of demonstrated experience with tools such as GHIDRA, SYSInternals, FireEye AX, or similar technologies.
• One (1) year of demonstrated experience with development of code in languages such as Python, Lua, C/C++, Ruby or similar
• No Degree Required
• Night Shift, Sunday – Wednesday

Certifications Required:

• DoD 8570 Compliance with CSSP Analyst baseline
• IAT level II or III certification
• Computing Environment (CE) Cert
• Global Information Assurances Cert (GIAC) Certified Fornsic Analyst (GCFA) cert or Certified Reverse Engineering Malware (GREM) cert
• Splunk Fundamentals I software training course

Position requires active Security Clearance with appropriate Polygraph

Pay Range: 185,000-235,000

The RealmOne pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Our approach to crafting offers considers various factors to establish an equitable and competitive compensation package. These considerations include, but are not limited to, the extent and intricacy of the role's responsibilities, the candidate's educational background, their work experience, and the specific competencies crucial for success in the role.

RealmOne Benefits:

• Healthcare Coverage + Insurance: Medical: Three (3) rich healthcare options through CareFirst with 100% or majority company-paid premiums. Tax-advantaged health savings account available with generous employer contribution. Dental + Vision: 100% employer-paid for employees and family, with a buy-up option available.
• Retirement + Savings: 401K – 10% TOTAL CONTRIBUTION – 5% safe harbor – 5% annual profit share (both immediately vested).
• Paid Time Off + More: 4 weeks starting PTO – 11 federal holidays + 2 floating holidays – Paid hours for company-required training.
• Career Growth + Development: Access to FREE 24/7 learning via Udemy – Opportunities to participate in tech councils, industry initiatives, etc. – $7,500 annual Educational & Professional Development Assistance.
• MORE BENEFITS…FOR EVERY LIFESTYLE – Paid parental leave – Adoption assistance – Annual swag drops – Flexible work schedules -Generous referral bonus program – Employee appreciation + family-friendly corporate events …and much more.

ABOUT US

• RealmOne is a mid-sized science and technology company dedicated to solving our customers' toughest mission challenges.
• Headquartered in Columbia, MD., RealmOne supplies advanced cybersecurity, data science, and software engineering services and products to customers in the Government and commercial sectors.
• RealmOne delivers encompassing mission assurance and critical systems support to government customers across various U.S. locations to include Colorado, Georgia, Hawaii, Texas, Utah, and Virginia.
• RealmOne has won numerous awards, including Top Workplaces by the Baltimore Sun. Across more than 20 prime contracts, RealmOne is a premier innovator for the Government and Department of Defense, and our team is located across the United States.