Cyber Malware Analyst

SSD is seeking a Cyber Malware Analyst with an active TS clearance

Our Red Team is actively seeking candidates to support cybersecurity projects across a variety of domains supporting the United States of America's national interest and advancing cutting edge research in the fields of Reverse Engineering, and Vulnerability Research. Due to the nature of delivering mission-critical capabilities and developing novel applications, the ideal candidate should utilize an interdisciplinary approach to problems and leverage knowledge in other domains and fields. The position will contribute to numerous development efforts encompassing reverse engineering, exploit development, red teaming, offensive cyber security projects and fuzzing.

We conduct advanced adversary emulation operations to challenge assumptions and emulate cyber and criminal threat actors targeting or attacking infrastructure. As a Red Team member, you will participate in the design and execution of campaign-based security operations, spanning a varying array of targets and platforms. Successful team members must be capable of evaluating environments, applications, systems, or processes to discover weaknesses, and subsequently leverage those discoveries into actionable real-world attack strategies.

Engagement in all phases of Red Team security operations

• Reverse engineer embedded systems

• Develop exploits and build mission-aligned proof-of-concept capabilities

• Explore novel techniques for automating reverse engineering and exploit development

• Work within the Red Team to perform physical exploitation, network exploitation and social engineering assessments against authorized targets

• Perform network reconnaissance and open source intelligence gathering

• Configure and safely utilize attack tools, tactics, and procedures against authorized targets

• Develop scripts, tools, or methodologies to enhance red team capabilities

• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel

• Provide risk-appropriate and pragmatic recommendations to correct identified flaws, vulnerabilities and misconfigurations