This position is located in Beltsville, MD and will be onsite 5 days a week. No hybrid/telework allowed. 

The selected candidate must be able to support 1st shift – Mon-Fri 6am-2pm.

Responsibilities:

• Provide malware analysis support in a 24x7x365 environment. 
• Conduct advanced analysis and recommend remediation steps for cyber security events and incidents. 
• Respond to and assist with the resolution of any suspected or successful cyber security breach or violation. 
• Share knowledge and intelligence gained from cyber security events with stakeholders. 
• Protect against and prevent potential cyber security threats and vulnerabilities. 
• Implement and use cyber security frameworks (e.g. MITRE-ATT&CK , Kill Chain, etc.).   
• Activities include the following:   
• Advanced code analysis (e.g. reverse engineering of malicious code)  
• Advanced traffic analysis (at the packet level) and reconstruction of network traffic to discover anomalies, trends, and patterns  
• Forensic analysis of suspected systems (e.g. SSD/HDD devices, on and off premise network devices, and storage media) impacted by malicious activity. 
• Provide advanced forensic analysis of digital storage devices (e.g. GFE) with abnormalities   
• Provide comprehensive findings and recommended remediation steps 

Qualifications:

Required Qualifications:

• Bachelor’s degree and at least 2 years of experience or a High School diploma and 6 years of related work  experience. 
• Must possess one of the following certifications:
• CCNA-Security
• CND
• CySA+
• GICSP
• GSEC
• Security+ CE
• SSCP
• Ability to resolve highly complex malware and intrusion issues using computer host analysis, forensics, and reverse engineering. 
• Ability to recommend sound counter measures to malware and other malicious type code and applications which exploit customer communication systems. 
• Knowledge in development of policies and procedures to investigate malware incidents for an entire computer network. 
• Expertise in discovering, analyzing, diagnosing, and reporting on malware events, files and network intrusion and vulnerability issues. 
• Incident Response experience utilizing Splunk and/or Tanium/HX.
• Demonstrate an intermediate proficiency in debugging and disassembling x86/x64 PE files. 
• Working knowledge of Python/Powershell/Bash/JS. 
• Experience with sandboxing/virtual environments.
• Must have an Active Secret Clearance.

EEO Statement