For Malware + RE:
Required Skills:
- Olly DBG, IDA PRO, Static and dynamic malware analysis, PE and non-PE file analysis
Here are the some of the key skills which we are looking for it:
- Static and dynamic malware analysis(aware of file structure like, PE, PDF, OLE, windows short cut files etc...)
- someone who has hands on writing signatures for malware samples(at-least initial vector malware).
- Aware of trending malware family campaign and analysis for threat write ups for that follow up family. (example malware family - Emotet/Qakbot/AgentTesla etc..)
- Email security and Endpoint Security (EOP)
- Investigating the Phishing campaignand spam emails which users have received and reported.
- Threat Intelligence analysis/ Threat hunting
- Analyzing PE files (Dynamic and static analysis) and providing detection for malicious PE files.(RE/Malware Analysis)
- Analyzing non-PE files (like OLE / PDF / HTML / HTA / VBS|VBE /JS/ WSF/JAR/LNK) andproviding detection for malicious files.
- Malware Analysis and Reversing.
- Reverse Engineering skills: familiar with debuggers, disassemblers, network protocols, file formats, sandboxes, hardware/firmware internals, software communication mechanisms, Classification, clustering and labelling of Malware.
- Knowledge of Advanced Techniques of Malware Analysis.
- Knowledge of Malware kill chain and MITRE ATT&CK techniques and tactics.
- Knowledge of AV evasion techniques and Pen testing tools like - Veil (equal rank), PowerShell Empire, Meterpreter, Unicorn, Cactus Torch, and Any other similar tools
- Additionally, Experience with advanced persistent threats, human adversary compromises and incident response.
- Excellent cross-group and interpersonal skills, with the ability to articulate business need for detection improvements.
- Excellent analytical skills and ability to identify patterns and trends.
- Strong research skills, data knowledge, and ability to analyze and present complex data in a meaningful way.
- Strong understanding of Cyber Security, modern security problems and threat landscape, Operating Systems (internals), computer networking concepts.
