We are seeking a motivated malware analyst to join our detection engineering team where you will research new threats and maintain malware to test against various Kaseya security protection and monitoring products. Your purpose will be to help ensure Kaseya’s customers and partners can respond effectively to whatever cyber threats impact them and our shared customers.

Responsibilities:

●    Conduct research into the latest malware and adversary Tactics, Techniques, and Procedures (“TTP”)
●    Conduct static and dynamic analysis of malware to categorize them and assist the detection engineering team in building detections and mitigations against various classes of malware
●    Maintain a repository of working malware and ransomware for which we can test our various security products
●    Simulate adversary attacks to validate new and existing detection logic to improve detection efficacy
●    Collaborate with supported security product teams to identify coverage gaps and areas for improving detection
●    Serve as a technical resource to security operations centers (SOC) during active response efforts with relation to the use of our detection capabilities
Required Skills:
●    At least 2 years experience analyzing and handling malware, performing incident response, threat hunting or digital forensics
●    Proficiency with various static malware analysis tools
●    Proficiency with at least one dynamic malware analysis tools
●    Working knowledge of common malware families and common adversary tactics, techniques, and procedures (e.g. MITRE ATT&CK™) 
●    General knowledge of Windows, Linux or MacOS operating system internals
Desired Skills:
●    Bachelor's degree or equivalent IT work experience
●    A strong candidate will have the GIAC Reverse Engineering Malware Certification (GREM) or similar
●    A strong candidate would also have the book “Practical Malware Analysis” by Sikorski and Honig be on their bookshelf
●    Familiarity with a scripting language like bash or PowerShell
●    One or more baseline cybersecurity certifications like SEC+, CEH, GCFA, GCFE, GNFA, or OSCP Certifications.