Tier 3 - Malware Analyst, SME

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMC is hiring a Tier 3 – Malware Analyst SME to conduct an analysis of digital evidence to support computer security incidents to derive useful information in support of system/network vulnerability mitigation. 

The selected applicant will perform a variety of activities including but not limited to:

• Conducting analysis of digital evidence to support computer security incidents to derive useful information in support of system/network vulnerability mitigation. 
• Supporting incident investigation by employing appropriate techniques in Surface Analysis, Runtime Analysis, and Static Analysis of suspected malware.
• Supporting the development of new detection capabilities by integrating the results of malware and forensic analysis tasks into new and existing detection use cases in order to prevent future occurrences.
• Analyzing malware to determine its capabilities, intent, indicators, and origin. 
• Confirming what is known about an intrusion and discovering new information using industry-standard malware and digital forensic analysis techniques.
• Examining recovered data for information of relevance to the investigation.
• Utilizing forensically sound procedures such as duplication of the evidence (i.e., forensic image) to ensure the original evidence is not modified.
• Processing various types of media including but not limited to hard drives, compact disks, solid-state storage media, mobile phones, GPS, and all tape formats.
• Maintaining specialized cyber defense software and hardware.
• Interfacing with external organizations to ensure appropriate and accurate dissemination of the investigation and other cyber defense information. 
• Providing a technical summary of findings in accordance with the customer’s established reporting procedures.  
• Assisting with Incident Response tasks as needed.
• Demonstrating effectiveness by successfully analyzing files and artifacts related to Red Team (penetration testing) activity.
• Providing support required to maintain the customer's CSSP accreditation per the standards.