Listing Description
Job Description
Mandiant Advantage Labs’ FLARE team works on in-depth reverse engineering, malware analysis, and research and development to support numerous functions within the Mandiant business.
If you have strong programming skills, experience in malware analysis or reverse engineering, and are looking for an opportunity to collaborate with an industry-leading team, then this may be the opportunity for you. As a reverse engineer working within FLARE you will dissect attacker tools and backdoors in support of incident responders. You will also help develop innovative tools to aid other business lines and automate malware analysis and reverse engineering efforts.
What You Will Do:
- Analyze executables and malicious files, model, and report on their behavior
- Collaborate with a team of experienced malware analysts and researchers
- Develop novel solutions to challenges facing incident responders and network defenders
- Support the company’s research and development efforts via applied research efforts
Qualifications
Minimum Requirements:
- Experience with of one or more object-oriented, functional or prototypical programming language (e.g. Java, C#, Python, Ruby, Erlang, JavaScript)
- Ability to perform basic scripting on Windows or Unix-based platforms
- Knowledge and experience of general computer science fundamentals (e.g. data structures, algorithms, code
- analysis, etc.)
- Basic knowledge of non-object-oriented programming languages (e.g. C)
- Basic knowledge of project tracking systems (e.g. JIRA)
- Basic knowledge of Git, Perforce, CVS, Subversion or other modern source control solutions
- Fundamental understanding of malicious executable activities and artifacts
- Degree in computer science, computer engineering or related discipline or equivalent experience
Desired Qualifications:
- Ability to analyze shellcode
- Ability to analyze packed and obfuscated code
- Capable of Python scripting to automate analysis tasks
- Capable of identifying host- and network-based indicators
Listing Details
- Citizenship: Not Provided
- Incentives: Not Provided
- Education: Not Provided
- Travel: Not Provided
- Telework: Full Telecommute