Why Work at SI?

Secure Innovations (SI) successfully and continuously strives to become experts in the Cybersecurity field by only focusing on Cyber!  Because of this, we proudly stand behind our motto, "We're Not Standard Cyber. We're the Cyber Standard."

SI was built on the principle that people matter first and foremost.  SI believes in providing a strong work/life balance by investing in our employees and encouraging professional and personal growth.  We do this by offering exceptional benefits, flexible schedules, and the tools necessary to achieve success through paid training, mentoring, and the opportunity to work alongside top-notch security professionals.

Secure Innovations was recently awarded as a PRIME on this mission-focused cyber program!  

The Malware Analyst 2 Support clients in solving difficult problems by providing recommendations based on the results of malicious code analysis. Analyze and evaluate malicious code to create technical reports for indicators of compromise and to recommend mitigation and detection actions. Work to continually improve current malware analysis techniques, and identify new ways to improve malware identification best practices. Conduct research and training on comprehending emerging malicious code threats.
 

The Level 2 Malware Analyst shall possess the following capabilities:

Conduct both dynamic and static analysis of suspicious code in order to establish malicious capability and determine potential impact.

Experience with host and network monitoring for analysis of malware execution & propagation methodologies.

Perform analysis on captured data, such as audit, log, network traffic, et cetera, to identify any intrusion-related artifacts.

Understanding of operating system-specific exploitation vectors.

Analyze malicious code by employing tools, scripting languages, and leveraging virtual machines/environments.

Support 24/7 monitoring of malware threats to NSA networks, hosts, mission platforms, and boundaries.

Generate documentation of vulnerabilities and exploits used by malware in written reports.

Communicate written and verbal information in a timely, clear, and concise manner.

Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Generate technical summary of findings in accordance with established reporting procedures.

Develop and recommend mitigation strategies.

Develop signatures, techniques, and rules to identify malware vectors.

Collaborate with internal and external organizations to discover new threats, develop mitigation techniques, processes, and tools which further the CSSP mission, as directed by the customer.

Evaluate emerging threats.

Correlate data from multiple sources to identify probable threat actors.

Qualifications: An Active Clearance w/ FS Poly is REQUIRED Five (5) years of demonstrated experience in cybersecurity Three (3) years of demonstrated experience with malware analysis Two (2) years of demonstrated experience with tools such as GHIDRA, SYSInternals, FireEye AX, or similar technologies. One (1) year of demonstrated experience with development of code in languages such as Python, Lua, C/C++, Ruby or similar Required Certifications: Requires DoD 8570 compliance with Information Assurance Technical (IAT) Level I or Level II certification (A+, Network+, CCNA-Security, CND, SSCP, Security+, CySA+, GSEC, etc) Requires successful completion of the Splunk software training course "Fundamentals 1" (This is FREE and can be completed online!) Requires one of the following: Global Information Assurances Certification (GIAC) Certified Forensic Analyst (GCFA) certificate or Certified Reverse Engineering Malware (GREM) certificate.