Malware Reverse Engineer, Senior Job at Booz Allen Hamilton (Fort Meade)

Senior Cyber Detection Engineer (SIEM)

Zachary Piper Solutions is seeking a Senior Cyber Detection Engineer (SIEM) to s...

Location

United States , Springfield

Salary:

135000.00 - 150000.00 USD / Year

Piper Companies

Expiration Date

Until further notice

Requirements

Active TS/SCI CI Polygraph required
Bachelor’s degree from an accredited college in a related discipline and 5+ years of prior relevant experience
IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required
Proficient in modern operating systems, including Windows, UNIX, network OS environments, databases, and virtualized computing platforms
Experienced with enterprise-grade security tools, such as Security Information and Event Management (SIEM) systems specifically Splunk, Threat Intelligence Platforms (TIPs), and network monitoring solutions
Skilled in developing, modifying, and fine-tuning detection mechanisms, including IDS signatures and SIEM correlation rules
Knowledgeable in implementing cybersecurity countermeasures and mitigation strategies to reduce risk and enhance system resilience

Job Responsibility

Support Cyber Operations Squadron (COS) efforts by ensuring timely publication of updated cybersecurity tool signatures, including antivirus and host-based security systems
Conduct in-depth threat analysis, including reverse engineering of malware, to uncover critical details such as origin, target, impacted systems, recommended mitigations, and mission risk
Develop custom content for Security Information and Event Management (SIEM) tools and create tailored IDS/IPS signatures to counter specific threats
Correlate security events and incidents using data from diverse enterprise sources to identify patterns and potential threats
Assess the impact of cyber incidents on data and infrastructure, providing detailed evaluations of damage and recovery needs
Perform trend analysis and reporting on cyber incidents to identify recurring threats and inform proactive defense strategies
Analyze network traffic and system data to detect anomalies and potential security threats
Deliver real-time detection, identification, and reporting of cyber intrusions, suspicious activities, and policy violations
Create and implement detection rules

What we offer

Full Benefits: PTO
11 Paid Holidays
Cigna Medical, Dental, and Vision
401k with ADP
Certification reimbursement
Contract mobility and job stability – Contract through 2026

Fulltime

Senior Network Defense Analyst

Assurit is currently seeking an experienced Senior Network Defense Analyst to su...

Location

United States , Linthicum

Salary:

Not provided

Assurit

Expiration Date

Until further notice

Requirements

Must have and maintain an Active Top Secret/SCI clearance
Master’s degree with at least 10 years of experience
Minimum of 8 years of experience in cybersecurity, with a focus on network defense and threat analysis
Strong analytical skills with the ability to analyze large datasets and identify patterns of malicious activity
Possesses deep understanding of cloud security architecture, including secure infrastructure design, access controls, data protection, and threat detection
Experience with performing cybersecurity analysis including incident response and management, forensic media analysis, malware analysis, reverse-engineering, cyber threat intelligence analysis, and security engineering
Comprehensive understanding of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat methodologies and tactics
Analyze and interpret diverse network data (Netflow, PCAP, custom logs) to identify threats and support investigations. Utilize virtual and physical sensors to strengthen defensive cyber posture
Demonstrated experience in AI & ML technologies, with practical experience applying them to cybersecurity challenges
Experience conducting all-source intelligence research and producing intelligence assessments

Job Responsibility

Proactively safeguard networks by analyzing network appliance data, identifying and prioritizing threats before they strike, and recommending effective mitigation strategies
Serve as a technical lead in cyber intelligence and all-source intelligence research, focusing on network operations
Analyze data from deployed network appliances, security events, and artifacts by leveraging AI and ML algorithms for anomaly detection and pattern recognition
Develop presentations, papers, and recommendations summarizing threat assessments and proposing effective countermeasures
Leverage classified data, open-source research, and net flow analysis, combined with AI and ML, to produce intelligence assessments, technical information papers, and cyber threat profiles of current events, enabling predictive analysis and proactive risk management
Craft data-driven reports and briefings for government leaders, leveraging AI and ML-generated insights and recommendations to inform critical decision-making

What we offer

medical and dental coverage
paid time off

Fulltime

Embedded Developer, Senior

As an embedded software engineer, you know how to create and maintain crucial pi...

Location

United States , Annapolis Junction

Salary:

86900.00 - 198000.00 USD / Year

Booz Allen Hamilton

Expiration Date

Until further notice

Requirements

14+ years of experience with computer network operations capability development and engineering services, including defense and exploitation to gain strategic advantages
10+ years of experience with computer programming in C/C++, Python, Assembly, or PerlScript
Experience with software development, analytic development, and DevOps techniques for malware variants, advancing crypt capabilities, and emerging unknown protocols
Experience gathering requirements, designing and developing approaches for product security and resilience, cryptographic solutions, and anti-forensic measures
Experience with indigenous and vendor proprietary protocols
Experience using automation and virtualization to deploy, maintain, and sustain capabilities, developing and executing strategies for countering or mitigating environmental challenges, security and policy constraints, and system and architecture limitations
Experience with designing, developing, debugging, and testing of embedded software, and performing requirements analysis to drive requirement specifications
Experience packaging embedded software products for release to government customers
TS/SCI clearance with a polygraph
Bachelor’s degree

Job Responsibility

Support the development of systems, sites, and tools for our clients
Write, test, and edit code in support of the team’s overall results
Develop and reverse engineer software that supports hardware functionality on a wide range of devices
Configure solutions based on the platform being used
Work with other team leaders to troubleshoot and correct operational issues
Work with cybersecurity specialists to ensure that the software you’re creating is secure

What we offer

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program

Fulltime

Senior CyberSecurity Researcher

We are seeking a highly skilled and motivated senior security researcher to join...

Location

France , Paris

Salary:

Not provided

GitGuardian

Expiration Date

Until further notice

Requirements

5+ years of experience working in a security engineer role, with 2+ years dedicated to research-related work, or equivalent
Strong offensive security background (pentesting, vulnerability research, or red team experience) with the ability to think like an attacker and translate that into defensive insights
Experience with reverse engineering (binary analysis, malware inspection, malicious packages) and API/web security (OAuth, JWT, token validation, secret exposure patterns)
Comfortable working with modern infrastructure, such as cloud platforms (AWS, GCP, or Azure) or AI/LLM ecosystems, and able to assess their specific security implications
Leverage AI tools actively in your day-to-day research workflow, whether for automation, analysis, or accelerating prototyping
Proficient in at least one system or scripting language (Python, Go, or Rust), fluent with a terminal, and able to independently retrieve, transform, and analyze datasets to support research conclusions
Track down complex security problems in software and infrastructure and define their solutions
Enjoy hacking things and rapidly prototyping ideas
Drive research autonomously, identify topics, conduct investigations, and publish findings, while partnering with engineering and product teams to translate insights into platform improvements
Public research track record: CVEs, conference presentations, open-source tooling, or technical publications

Job Responsibility

Investigate novel and existing tactics to find and abuse exposed credentials
Publish findings as authoritative research
Analyze ongoing threats and attacks
Explore new exploitation techniques
Document emerging tactics
Collaborate with engineering teams to identify ways to improve products in terms of secret validation and coverage
Track offensive trends and techniques
Work closely with marketing team to produce 2–3 technical deep-dive articles or talks per quarter

What we offer

Package that includes BSPCE
Lunch voucher (Swile, 12€ at 50%)
Sponsored Wellpass (gymlib)
Non-charged health insurance for children (Sidecare / Generali)
Up to €300 to improve your home office set-up
Yearly holiday allowance
Referral bonus of 4000€ for any new Guardian we might hire thanks to you
Team building: monthly budget dedicated to each employee that you can spend as you wish, with colleagues (latest examples to date: Michelin star restaurant, karaoke, stand-up show, kitesurfing week-end)
Remote policy: hybrid (3 days/week at the office in Paris)
Opportunities for career development in the long term

Fulltime

Principal Applied Scientist

As the advertising ecosystem expands, sophisticated adversarial actors are lever...

Location

India , Bangalore

Salary:

Not provided

Microsoft Corporation

Expiration Date

Until further notice

Requirements

Bachelor’s, Master’s, or PhD degree in Computer Science, Cybersecurity, Mathematics, or a related field, with 10+ years of related experience
Deep technical expertise in Cybersecurity, Anti-Abuse, or Adversarial Machine Learning
Strong programming skills in C++ or Python (at least one is required), with experience in building production-quality security or ML systems
Hands-on experience in one or more of the following: Web Security standards and Authentication Protocols (OAuth, OIDC), Malware analysis, de-obfuscation, or reverse engineering, Building fraud detection models at scale
Proven ability to design and implement defense mechanisms against complex abuse vectors (e.g., botnets, synthetic identity, evasion/cloaking)
Strong communication and collaboration skills, with experience articulating complex security risks to business and product leadership

Job Responsibility

Strategic Threat Modeling: Develop and maintain comprehensive adversarial frameworks to map the lifecycle of emerging threats, from account compromise (ATO) to malicious payload delivery
Evolution of Advertiser Trust: Advance the continuous, signal-based security protocol. Research and implement behavioral biometrics and Proof of Liveness models to detect synthetic identities and coordinated fraud rings
Adversarial Research: Proactively identify 'unknown unknown' vulnerabilities through red-teaming and exploratory data analysis, developing models to predict attacker behavior before widespread exploitation
Technical Leadership: Drive the technical roadmap for integrity and security, mentoring senior engineers and influencing cross-functional stakeholders on security investment priorities

Fulltime

Senior Security Researcher

We are looking for a Security Researcher who thrives on both sides of the fence....

Location

Israel , Tel Aviv

Salary:

Not provided

Island

Expiration Date

Until further notice

Requirements

5+ years of experience in at least one of the following: security research, vulnerability research, malware analysis, threat intelligence, or detection engineering
Offensive security mindset with the ability to flip to the defensive side — finding attacks and building mitigations
Strong analytical skills — comfortable digging into unfamiliar code, protocols, or systems and figuring out how they break
Familiarity with operating system internals (Windows and/or macOS)
Hands-on experience with reverse engineering or dynamic/static analysis tools
Ability to write code for automation, tooling, and proof-of-concepts
Strong written and verbal communication — ability to write compelling research and present at conferences

Job Responsibility

Offensive Research: Discover new attack vectors, abuse patterns, and security gaps in browsers, web applications, OS internals, and enterprise workflows
Defensive Engineering: Design and implement detections, mitigations, and security policies informed by your offensive findings
close the loop from attack to protection
Vulnerability & Malware Analysis: Perform reverse engineering on malware, exploits, and obfuscated code across Windows, macOS, and browser environments
Web & Browser Security: Research techniques ranging from classic vulnerabilities (XSS, SSRF) to browser-specific primitives (extension abuse, DOM manipulation, same-origin bypasses)
Supply-Chain Security: Investigate threats in software supply chains, including browser extension marketplaces and package registries
Threat Intelligence: Correlate signals across multiple sources to identify malicious infrastructure and adversary TTPs
Public Impact: Write technical blog posts, publish research, and represent Island at major security conferences (Black Hat, DEF CON, etc.)

Senior Investigator

Microsoft’s Digital Crimes Unit (DCU) has an immediate opening for a highly qual...

Location

Belgium , Brussels

Salary:

Not provided

Microsoft Corporation

Expiration Date

Until further notice

Requirements

Bachelor’s degree & demonstrable experience in cyber investigations, threat intelligence, or cyber defense operations
Willingness to provide expert witness testimony in court filings and proceedings that will be made public
Proficient with Microsoft SQL Server, KQL, Python, and/or other scripting languages
Proficient knowledge of malware analysis, malware reverse engineering, and behavioral malware analysis
Demonstrated ability to author clear, accurate, and highly technical investigative reports that translate complex technical findings into actionable insights for non-technical audiences, including legal, executive, and law enforcement stakeholders
Ability to meet Microsoft, customer, and/or government security screening requirements for this role (including specialized security screenings)
Microsoft Cloud Background Check: required upon hire/transfer and every two years thereafter
Collaborative, team-first mindset
Proficient written and verbal communication skills, including the ability to translate complex technical findings for a broad range of stakeholders (e.g., law enforcement, legal counsel, and executives)

Job Responsibility

Identify and analyze data sources to uncover cybercrime patterns and trends targeting our services and customers
Building proof-of-concept and prototype threat hunting tools, automations, and new capabilities
Collaborate with security engineers and cross-company stakeholders to implement comprehensive investigative and enforcement strategies
Lead and support complex fraud investigations involving cyber‑enabled financial crime, including online scams, business email compromise (BEC), payment fraud, account abuse, and related large‑scale fraud activity
Conduct analysis on large, complex data sets to detect and investigate anomalies, develop actionable insights and strategies
Identify and map malicious technical infrastructure used to facilitate cybercrime
Work independently to detect, investigate, and understand new and emerging cybercrime attack vectors
Partner with DCU attorneys to develop legal strategies to disrupt and impact online criminal networks
Drafting criminal referrals for law enforcement
Provide expert witness testimony in court filings and proceedings

Fulltime

Principal/ Senior Security Researcher Linux & API Security EDR

Are you an innovative security researcher with a deep understanding of Linux sys...

Location

Israel , Tel Aviv

Salary:

Not provided

Palo Alto Networks Italia

Expiration Date

Until further notice

Requirements

5+ years of experience in cybersecurity research, with a proven track record of impactful projects
Good knowledge of Linux OS internals, including both user and kernel space
Solid knowledge of the cyber threat landscape, modern malware techniques, and APTs
Hands-on experience in real-world threat hunting, incident response, or detection engineering
Proficiency in programming languages such as Python, C, and/or C++, with a strong understanding of system-level programming and APIs
Excellent problem-solving skills and a passion for cybersecurity innovation
Ability to work independently, take initiative, and collaborate effectively in a team environment

Job Responsibility

Play a pivotal role in shaping the future of our security solutions
Enhance product effectiveness by designing advanced protection components and developing sophisticated detection rules
Research Linux OS internals, virtualized environments, and malware behaviors to inform and strengthen our attack prevention mechanisms
Apply advanced AI and big data approaches to investigate and analyze large-scale datasets across our client base
Lead research on novel protection concepts and bring them to production-grade quality, serving as a subject matter expert
Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs targeting Linux systems
Conduct static and dynamic reverse engineering of Linux malware to uncover new techniques and develop mitigation strategies
Collaborate closely with engineering, product management, and other research teams to translate research findings into production features

Fulltime

Select Country

Malware Reverse Engineer, Senior

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?