Senior Malware Analyst

About the Role:

We are seeking a highly skilled Senior Malware Analyst to join our team. This role will be based in Hyderabad, Pune, and Chennai.

Key Responsibilities and Skills:

• Perform comprehensive static and dynamic malware analysis, with a deep understanding of file structures such as PE, PDF, OLE, and Windows shortcut files.
• Develop and write signatures for malware samples, particularly for initial infection vectors.
• Stay abreast of trending malware families and campaigns, conducting thorough analysis and authoring threat write-ups for follow-up families (e.g., Emotet, Qakbot, AgentTesla).
• Analyze and investigate phishing campaigns and spam emails reported by users.
• Conduct threat intelligence analysis and proactive threat hunting.
• Analyze PE files using both dynamic and static methods to create effective detections for malicious PE files (Reverse Engineering/Malware Analysis).
• Analyze non-PE files including OLE, PDF, HTML, HTA, VBS/VBE, JS, WSF, JAR, and LNK files, and develop corresponding detections.
• Engage in in-depth malware analysis and reverse engineering.
• Utilize reverse engineering skills with debuggers, disassemblers, network protocols, file formats, sandboxes, and hardware/firmware internals.
• Classify, cluster, and label malware effectively.
• Apply advanced techniques in malware analysis.
• Understand the malware kill chain and MITRE ATT&CK techniques and tactics.
• Recognize and analyze AV evasion techniques.
• Familiarity with penetration testing tools such as Veil, PowerShell Empire, Meterpreter, Unicorn, Cactus Torch, and similar tools is a plus.
• Experience with Advanced Persistent Threats (APTs), human adversary compromises, and incident response is highly desirable.
• Exhibit excellent cross-group and interpersonal skills, with the ability to articulate the business needs for detection improvements.
• Demonstrate strong analytical skills, identifying patterns and trends in complex data.
• Possess excellent research skills, with the ability to analyze and present data effectively.
• Maintain a strong understanding of Cybersecurity principles, modern security challenges, the threat landscape, operating system internals, and computer networking concepts.

Required Technical Skills:

• OllyDBG
• IDA PRO
• Static and dynamic malware analysis
• PE and non-PE file analysis