Malware Reverse Engineer (Several Levels)
在一个充满可能性的世界里，追求无限机会。想象下一篇！在帕森斯，你可以想象你能勃发展，与杰出的人一起工作和成为自己的一项职业生涯。我们以尊重人们，拥抱灵活性和促进增长的领导愿景为导向，我们培养了一个创新文化，使你能够实现充分潜力。释放你的才能并重新定义可能的事情。** 工作描述：** 巴森斯正在寻找一个惊人的才华 ** 恶意软件分析师 （多级）**加入我们的团队！在这个角色中，你将执行恶意软件分析和软件逆转工程来识别恶意行为，提取妥协指标，并支持网络调查。**What You'll Be Doing:** - 进行恶意软体和潜在恶意文件的静态和动态分析。- 进行软件反转工程来确定恶意二进制器的行为，提出妥协指数，并识别潜在归因。- 开发或维护用于恶意软硬件分类，文物抽取，时间线开发和重复检查任务的脚本和分析工具。- 确定妥协，持久机制，侧移活动，指挥和控制活动，特权升级，凭证滥用和其他敌对行为的指示。- 执行证据识别，法医图像检查和提取，哈希，时刻标签分析，文物解释，反法医检测和用户活动重建。- 保持准确的监控链文件并确保根据实验室程序和安全要求处理，存储，传输和处置证据。- 编制完整，技术准确和专业格式的恶意软件分析报告。- 验证恶意软件分析工具，文件验证结果，验证工具输出，并根据分配使用版本控制实践开发或维护批准的脚本。- 参加法医报告的技术同行审查和结合评论。- 支持专家见证人准备，宣誓声明，令牌，假陈述，辩论法院会议以及证明，当指定和合格时。- 支援质量保证活动，包括 SOP 实施，审计准备性，能力测试和认可相关文档。- 支持收集和分析涉及案例量，后载量，吞吐量，周期时间，及时性，工作负荷，重复工作，错误率以及质量的指标
查看英文原文
In a world of possibilities, pursue one with endless opportunities. Imagine Next!
At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.
**Job Description:**
Parsons is looking for an amazingly talented **Malware Analyst (Several Levels)** to join our team! In this role, you will perform malware analysis and software reverse engineering to identify malicious behavior, extract indicators of compromise, and support cyber investigations.
**What You'll Be Doing:**
- Perform static and dynamic analysis of malware and potentially malicious files.
- Conduct software reverse engineering of malicious binaries to determine behavior, extract indicators of compromise, and identify potential attribution.
- Develop or maintain scripts and analytical utilities for malware triage, artifact extraction, timeline development, and repetitive examination tasks.
- Identify indicators of compromise, persistence mechanisms, lateral-movement activity, command-and-control activity, privilege escalation, credential abuse, and other adversary behaviors.
- Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.
- Maintain accurate chain-of-custody documentation and ensure evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
- Prepare complete, technically accurate, and professionally formatted Malware Analysis Reports.
- Validate malware-analysis tools, document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices, as assigned.
- Participate in technical peer reviews of forensic reports and incorporate review comments.
- Support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
- Support quality-assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
- Support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
- Provide technical input to training, mentorship, process-improvement, and lessons-learned activities.
**What Required Skills You'll Bring:**
- Active Secret clearance; Top Secret clearance with SCI eligibility is preferred.
- Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field. Four years of hands-on digital-forensics, malware-analysis, or reverse-engineering experience may be substituted for the degree.
- Proven experience performing software reverse engineering using IDA Pro, Ghidra, or equivalent tools.
- Hands-on digital-forensics, malware-analysis, and reverse-engineering experience appropriate to the assigned level
- **Malware Analyst 1:** Minimum of two years
- **Malware Analyst 2:** Minimum of five years
- **Malware Analyst 3:** Minimum of eight years
- **Malware Analyst 4:** Minimum of 12 years.
- Experience performing static and dynamic malware analysis and interpreting malicious binary behavior.
- Ability to identify indicators of compromise, adversary behaviors, persistence mechanisms, lateral movement, command-and-control activity, privilege escalation, and credential abuse.
- Experience maintaining chain-of-custody documentation and handling evidence in accordance with laboratory procedures and security requirements.
- Ability to prepare accurate, complete, and professionally formatted Malware Analysis Reports.
- Strong analytical, investigative, technical, documentation, and written communication skills.
- Ability to work independently and collaborate effectively with investigators, cybersecurity personnel, technical reviewers, government representatives, and multidisciplinary teams.
**What Desired Skills You'll Bring:**
- At least one active certification, or an equivalent certification approved by the COR, including:
- GIAC Reverse Engineering Malware
- EC-Council Certified Reverse Engineering Analyst
- DC3 Cyber Training Academy Digital Forensic Examiner
- GIAC Certified Forensic Analyst
- Computer Hacking Forensic Investigator
- Formal training dedicated to expert-witness testimony, rules of evidence, and courtroom procedure, such as DC3’s 40-hour Forensic Trial Training course, completed within the last three years when required for assigned duties.
- Experience analyzing Windows, Linux, macOS, mobile, embedded, or cloud-based malware.
- Experience using IDA Pro, Ghidra, Binary Ninja, debuggers, disassemblers, sandbox environments, or comparable reverse-engineering tools.
- Experience developing scripts and analytical utilities for malware triage, artifact extraction, timeline development, or automated analysis.
- Experience validating malware-analysis tools, verifying tool outputs, documenting validation results, and using version-control practices.
- Experience supporting peer review, expert-witness preparation, affidavits, warrants, depositions, moot court sessions, or courtroom testimony.
- Experience supporting quality-assurance programs, SOP implementation, accreditation activities, competency testing, audits, and laboratory metrics.
- Experience with malware families, anti-analysis techniques, obfuscation, packing, persistence, command-and-control protocols, and attribution analysis.
**Security Clearance Requirement:**
An active Secret security clearance is required for this position.
This position is part of our Federal Solutions team.
The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.
Salary Range: $88,400.00 - $154,700.00
We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!
Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.
We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!
Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to[https://www.parsons.com/fraudulent-recruitment/](https://www.parsons.com/fraudulent-recruitment/).