About this job

Sapienza Consulting is recruiting Engineer (Digital Malware Analysis) to join NATO-NCIA, at Mons, Belgium

Responsibilities

• Contracted individual must be able to perform effectively and efficiently with minimal supervision. Contracted individual will be asked to support development of one or more technical deliverables and/or provide exercise support in execution of projects undertaken within 2020 calendar year
• Within Cyber Security Operations Branch and reporting to Incident Analysis and Response Section Head, duties of individual mainly focus on:
• Provide technical and expert support for to the 24/7 Cyber Security Incident Analysis and Responses process
• Execute both static and dynamic Malware analysis and capture results in technical analysis report
• Execute Digital Forensic Analysis in the form of network, system and memory forensics and capture results in technical Analysis report

• Identification and Sharing of technical Indicators of Compromise with other NATO stakeholders, NATO nations and our different partners, in accordance with our sharing agreements

• Develop tools, scripting, automation and integrations to automate activities as much as possible, mostly using Python and PowerShell
• Experiment and conduct research in Malware Analysis and Forensic areas
• Propose additional detection content (Network IDS rules, SIEM content, endpoint scanning, etc)
• Participate in, or support a Cyber Security Response Team designated to provide Cyber Security Incident Response happening on one or multiple physical locations, including NATO Alliance Operations and Missions
• Support production of Standard Operating Procedures covering all aspects of Digital Forensics and Malware Analysis

Profile

• Required Security Clearance: NATO Secret
• Contracted individual will hold University degree at nationally recognised/certified University in technical subject with substantial IT content and 3 years post related experience. Lack of university / college degree may be compensated by demonstration of at least 8 years extensive and progressive expertise in duties related to function of SOW
• At least 3 years demonstrable experience in conducting Digital Forensics and/or Malware Reverse-Engineering or Analysis
• Very good understanding of inner working of modern Operating Systems on Windows and Linux environment
• Very good understanding of communication mechanisms on modern internet-facing systems: REST, SOAP, AJAX, MIME, APIcalls
• Good understanding of modern scripting languages: Python, PowerShell, JavaScript
• Good understanding of TCP/IP stack up to Application Layer
• Ability to work independently (while having support of team), taking initiatives, identifying areas of potential improvement and taking ownership

Candidates must be eligible to work in the EU

For information on how we process the personal data in your application, please see the Sapienza Privacy Statement here.