Cybersecurity Incident Response & Malware Analyst

This is a 6 month contract to hire position

Security Certifications

– GNFA, GCFE, GPEN, and GREM

– OSCP and OSCE (REQUIRED)

**Candidates must have investment banking experience or finance exp**

Role

Do you have a knack for information security? Are you at your best when you need to analyze information security related incidents? We’re looking for someone like that to:

– Analyze malware samples to understands its behavior, assess threat actor motivations, and extract indicators of compromise (IOCs)

– Act upon threat intelligence provided by Cyber Threat Intelligence function

– Respond to Information Security related queries

– Perform cyber threat hunting for the detection of advanced threats

– Mentor and train junior analysts to enhance the overall technical skillset of the SOC, establish analytic discipline and critical thinking, and promote greater curiosity – thinking "outside the box"

– Expand, tune, and enhance rulesets – SIEM, IDS, etc. – to identify security incidents and reduce false positives

– Investigate IOCs provided by Cyber Threat Intelligence or the Cyber Hunter function

– Handling incidents – encompassing multiple functions: detection and identification, incident triage, network and host-based forensic analysis, root-cause analysis, containment, system hardening, etc.

Team

The security operations center is a global team. We are involved in different type of information security incidents (phishing, malware, denial of service, inappropriate usage and unauthorized access). We are a young and empowered team who always drives for continuous improvement.

Your experience and skills

You have:

– A natural ability to solve complex issues through analytical and lateral thinking

– Performed proactive hunting; have detected anomalous and potentially malicious activity in log data

– Master's degree in a STEM field with 3+ years of relevant experience; Bachelor's degree in a STEM field with 5+ years of relevant experience; or 9+ years of incident response, malware analysis, and threat detection

– Hands-on experience with content development and use-case management

– Proficiency in log parsing and data analysis (REGEX is a must)

– Proficiency in x86 assembly language, disassemblers, and debuggers

– Hands-on experience with Volatility or similar malware analysis/forensic tools

– Proficiency in static and dynamic malware analysis

– Demonstrable proficiency in code de-obfuscation and anti-forensic techniques

– Fluency in at least one compiled language (C, C++, etc.) and one scripting language (Python, Perl, etc.)

– A firm understanding of the TCP/IP stack and networking (knowing the difference TCP and UDP is not enough)

– Moderate to advanced understanding of DDoS attacks and mitigation techniques

– Fluent in English