EH-Net

Work Location: Alexandria Virginia
Contact: dzornow at aci-hq dot com
Contact Phone: 443.539.1609
Mandatory Requirements:
MUST BE A U.S. CITIZEN & MUST HOLD AN ACTIVE CLEARANCE
 
Position Description:
Perform in-depth analysis of suspicious and malicious code to determine functionality and detailed code attributes.  Utilize both static and dynamic code analysis tools and techniques.  Provide short-term tactical analysis to extract key actionable pieces of information from suspect code to be used by the network defense and incident response community as well as longer-term strategic analysis targeted at assessing code sophistication, origin and comprehensive functionality.  Work with forensic/media analysts, network traffic analysts, incident handlers, intelligence analysts and investigators to maximize the value and productivity of malicious code analysis capabilities.

Requirements:
Candidate should have a detailed understanding of programming languages, compilers/debuggers/dissemblers, operating system memory handling & APIs, micro-processor architecture, program execution models and binary code protection/obfuscation mechanisms.  Familiarity with networking concepts, protocols and architectures (OSI-model, TCP/IP, addressing, LAN/WANs, VPNs, routers/routing, etc).  Knowledge of security concepts, protocols, processes, architectures and tools (authentication & access control technologies, intrusion detection, network traffic analysis, SIM technology, incident handling, media/malware analysis, etc).
 
Relevant professional certifications include:
 - GREM
 - GCFA
 - GCIH
 - GCIA