Cybersecurity Systems Engineer

Cornerstone Defense - Herndon, VA

Full-time - Mid Level

Herndon, VA

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Systems Engineer at Cornerstone Defense will play a crucial role in supporting the Cyber Investigations team by leveraging technical expertise in reverse engineering and software engineering. This position focuses on automating data acquisition and processing, developing malware sandboxes, and analyzing malicious binaries to enhance cybersecurity measures. The role requires a strong background in malware analysis and digital forensics, along with the ability to produce detailed technical reports on findings.

Responsibilities

• Automation of data acquisition, processing and scanning.
• Develop and maintain malware sandboxes and software plugins to enable malware investigations.
• Ability to reverse code to determine malicious behavior or uncover IOCs for detection.
• Automation/Scripting for cloud investigations (investigative methodology for response and opensource tooling).
• Isolate, review, analyze and reverse-engineer malicious binaries to determine functionality and capability.
• Analyze samples and provide written technical reports related to the scope, nature, and characteristics of the malicious code.

Requirements

• 4+ years of experience in malware analysis, reverse engineering, digital forensics or related position.
• Experience with Python.
• Experience with Intel x86/x64 assembly.
• Experience with Windows operating system & architecture.
• Experience with static analysis tools such as IDA Pro, Ghidra and Binary Ninja.
• Experience with debugging tools such as x64Dbg and WinDbg.
• Experience with virtualization, sandboxing, and emulation tools like VMware, KVM, QEMU and others.
• Experience with programming languages such as C, C++, .NET, Java, etc.
• Active/Current TS/SCI with polygraph clearance.
• Experience with additional operating systems such as Linux, macOS, Android, iOS, etc.
• Working knowledge of Computer Network Exploitation (CNE), Computer Network Attack (CNA) and Computer Network Defense (CND) tools and techniques.
• Knowledge of the MITRE ATT&CK framework.
• Knowledge of common digital forensic techniques and practices.
• Experience with additional architectures such as ARM/ARM32 and MIPS.
• Experience with other operating system file formats, such as ELF.
• Experience with development and/or scripting utilizing Python and/or other programming languages.
• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity or similar technical field of study, or 6 additional years of experience in lieu of degree.