Malware Analyst - Assistant Vice President

Job Description:

Job Title Malware Analyst Corporate Title Assistant Vice President Location Jacksonville, FL Overview

At Deutsche Bank, our defense is as sophisticated as the threats we face. The Information Security Threat Operations (ISTO) team is the front line, defending a global enterprise against thousands of daily intrusion attempts. You will be joining the Advanced Threat Response (ATR) group, an elite unit of specialists in digital forensics, malware analysis, and threat hunting. As a Malware Analyst for Malware Analysis and Incident Response, you will play a crucial role in understanding the malicious software impacting our organization during active incidents.

This is a hands-on technical role where you will support the in-depth analysis of malware samples, from various threat actors and targeted attacks, to contribute to real-time incident response efforts.

What We Offer YouA diverse and inclusive environment that embraces change, innovation, and collaborationA hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days Employee Resource Groups support an inclusive workplace for everyone and promote community engagement

Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits

Educational resources, matching gift and volunteer programs

What You’ll DoConduct in-depth analysis of malware involved in active security incidents, including ransomware, targeted attacks, and advanced persistent threats

Execute static and dynamic analysis, reverse engineering, and behavioral analysis of sophisticated malware samples across various operating systems (Windows, Linux, macOS)
Serve as a technical expert during critical security incidents, leveraging malware analysis findings to identify threat actor TTPs, develop containment strategies, and support rapid eradication and remediation efforts

Articulate basic technical findings from malware analysis into clear and concise documentation, contributing to internal threat intelligence reports for technical peers and supporting broader incident communication

Enhance and mature the team’s malware analysis capabilities by developing new analytical techniques, automating analysis workflows, creating custom tools, and improving detection signatures (e.g., YARA rules)
Skills You’ll Need Proven experience conducting in-depth static and dynamic malware analysis, reverse engineering, and behavioral analysis of sophisticated threats in an enterprise environment

Hands-on expertise with industry-standard malware analysis tools (e.g., IDA Pro, Ghidra, x64dbg, malware sandboxes, Wireshark, Process Monitor) and methodologies for understanding malicious code Proficiency in at least one scripting language (e.g., Python, Power Shell) for automating malware analysis tasks, extracting artifacts, and developing custom analysis tools

Deep understanding of Windows and Linux operating system internals, memory management, process execution, and network protocols relevant to malware behavior

Skills That Will Help You Excel Proven experience with advanced reverse engineering techniques, including obfuscation bypass, anti-analysis trick identification, and unpacking complex malwareA strong understanding of the incident response lifecycle, threat actor methodologies (MITRE ATT&CK Framework), and the critical role of malware analysis in containment, eradication, and recovery

Familiarity with analyzing malware behavior and artifacts in cloud environments (e.g., AWS, Azure, GCP) and understanding cloud-specific threats

Ability to translate malware analysis findings into actionable threat intelligence, including YARA rules, Snort/Suricata signatures, and comprehensive threat reportsA bachelor’s degree in computer science, Information Security, or a related field, or equivalent professional experience. One or more of the following certifications are highly preferred: GIAC Reverse Engineering Malware (GREM), OSCP, OSCE, or similar advanced malware analysis certifications

Expectations

It is the Bank’s expectation that employees hired into this role…