The Malware Analyst is responsible for identifying, analyzing, and understanding malware threats that affect national, sectoral, or organizational stakeholders. This role involves conducting malware analysis, supporting incident response activities and providing technical findings and recommendations to help identify, contain, and mitigate malware threats. The analyst will also contribute to cybersecurity research and the development of timely advisories and reports on emerging malware threats.
Key Responsibilities
- Perform static and dynamic analysis of malware to understand its behavior, functionality, and potential impact.
- Conduct malware analysis and basic reverse engineering to identify infection methods, payloads, and evasion techniques.
- Develop and maintain detection artefacts such as YARA rules and Indicators of Compromise (IOCs) for identifying and classifying malware.
- Utilize and maintain malware analysis tools, scripts, and sandbox environments to support malware investigation.
- Provide technical findings and recommendations to support malware containment, eradication, and prevention.
- Prepare advisories, alerts, and reports on malware threats, analysis findings, and mitigation strategies.
- Conduct research on emerging malware families, attack techniques, and evolving threat trends.
- Support incident response activities involving malware investigation and analysis.
Position Requirements
- Bachelor's Degree in Information Security, Cybersecurity, Computer Science, or related fields.
- Preferred: Professional certifications such as those from ISC2, ISACA, or GIAC are an advantage.
- At least 3 years of experience in cybersecurity, malware analysis, incident response, or a related field.
- Experience in analyzing malware and identifying malicious behaviors, techniques, and indicators.
- Familiarity with malware analysis tools such as IDA Pro, Ghidra, OllyDbg, and Wireshark.
- Good understanding of operating systems, particularly Windows and Linux, network protocols, and basic assembly language.
- Good analytical, problem-solving, and technical report-writing skills.