Job Overview:
We are seeking a highly motivated Threat Researcher to join our team.
Only seeking local DC/Maryland/Virginia candidates.
Core Responsibilities
Performing static and dynamic malware analysis using tools such as Detect It Easy, System Informer, and API Monitor to build an attack chain used to build emulations
Reverse engineer payloads and scripts to document execution behavior in detail
Write emulations in languages such as C++, PowerShell, C#, and others to emulate malware behavior discovered in the malware analysis phase
Develop detection logic based on emulations and malware analysis. Identify telemetry gaps in Sysmon, auditd, EDR, and other sources to improve detection coverage
Produce high-quality technical reports with executive-level summaries of findings
Debug malware and emulations using tools such as x64dbg, WinDbg, or other debuggers
Analyze applications for vulnerabilities using tools such as x64dbg, System Informer, and other reverse engineering tools
Correlate events between incidents and malware behaviors identified during the malware analysis phase
Conduct hunt activities from a detection engineering perspective
Strong Understanding of the Following Concepts:
PE file structure, including DOS Header, PE Header, and Optional Header
RVA vs. VA vs. File Offsets
Windows Search Order
Import/Export Address Table
Splunk Search Processing Language (SPL)
Programming languages including C++, C#, Python, and Perl
Scripting languages including PowerShell, JavaScript, and VBScript
Networking fundamentals
Windows Internals
Offensive Security concepts
Evasion Techniques
Job Type: Full-time
Pay: $140,000.00 - $180,000.00 per year
Benefits
Dental insurance
Health insurance
Paid time off
Vision insurance
Application Question(s):
Are you located in the DC/MD/VA area?
Education:
Bachelor's (Preferred)
Location:
Washington, DC (Required)
Work Location: Remote