Cyber Operations Malware Analyst - Intermediate

Cyber Operations Malware Analyst - Intermediate
Fort Knox KY or Remote
Active Secret Clearance Required
@Orchard is supporting a growing Federal contractor with a need for a Cyber Operations Malware Analyst. The individual in this role will be responsible for conducting research on malicious software, vulnerabilities, and exploitation tactics, and providing findings in technical reports with details of malware, identification parameters, advanced capabilities, and mitigation strategies.

As the Malware Analyst you will:

• Participates in evaluation and analysis of complex malicious code through utilization of tools, including dissemblers, debuggers, hex editors, un-packers, virtual machines, and network sniffers.
• Identifies all information systems that meet quarantine criteria for analysis.
• Compiles vulnerabilities into a Quarantine List (QL) for review, processing, and coordination utilizing various tracking tools/ticket systems.
• Identifies all hosts that have been in quarantine with no actions pending or initiated for remediation.
• Provides reports as required.
• Reviews scan(s) to ensure remediation was successful.
• Provide status of device to requesting organization technician/representative according to current quarantine reporting processes and requirements.
• Updates and resolves tickets with recommendations, routes ticket for further troubleshooting or reimaging or removes if no remediation available.
• Provides surge support, technical guidance, and expertise in the areas of Cybersecurity to support Customer, Mission Partners, IMOs, ISSOs, IS Owners, Software Developers, Network System, and Database Administrators IAW all related cyber regulations and directives; provide results in reports, briefs, and deliverables as required to the appropriate Government representative.
• Provide Cybersecurity surge support in the event of real world or additional requirements in support of RMF compliance checks and documentation review across authorization boundaries, including, but not limited to:
  • Perform security review preparation for all security controls associated with RMF applicable to an assigned authorization boundary based upon the Confidentiality, Integrity, or Availability designation.
  • Perform on site or off-site reviews of all information systems to audit and validate compliance with associated security controls.
  • Perform as reviewers of audit teams during inspections, assessments, evaluations, audits, etc.
  • Provide reports to the assigned Government representative as required.
  • Provide reviews, validation, and deliverable efforts in support of compliance or non-compliance IAW CCI, STIGs and SRGs for each finding or vulnerability IAW RMF.
  • Provide embedded Cybersecurity support across Customer or other supported organizations as required.

Requirements:

• Active Secret clearance
• BA/BS; MA/MS preferred
• 5+ years of experience with application security, network security, reverse engineering, or malware.
• Requires thorough knowledge of worms, viruses, Trojans, rootkits, botnets, Windows internals, and Win32 API.
• Additional experience required in programming (assembly and web) and system analysis with various tools, including IDA Pro, Ollydbg, PCAP tools, or TCP Dump.
• Must be professionally certified, within a CND discipline, as Technical Level II as defined by DODI 8570. (Security+, CCNA-Security, GSEC, CySA+, CND or SSCP recommended)

Established in 2010, @Orchard has an exceptional reputation, providing staffing solutions to time-sensitive, talent scarcity issues to deliver better talent management ROI. Our specialty lies in the critical area of program talent acquisition and resource management, not in one narrow skillset, but across many areas of technical and functional delivery. To learn more about our other exciting opportunities, visit our Jobs Page at www.atorchard.com .