Senior Malware Researcher - 6305

Position Summary: The CERT Malicious Code group aims
to improve malware analysis capability while addressing active and emerging
threats. The successful candidate will research emerging threats in malicious
code, analyze malicious code samples to identify intruder techniques, and
participate actively in the broader malicious code research community.

Duties
include:

• Conduct
  large scale data mining research into program similarity, intruder techniques,
  and emerging threats.
• Design,
  prototype, document, mature, and transition tools and methods for new
  analytical techniques to advance the research agenda.
• Participate in the broader
  security community through collaboration, publication of research papers, and
  presentations presenting research results.

Malware Analysts may be on-call for critical support
situations.

Education: Master of Science in
Computer Science or scientific/technical field or equivalent plus 8 years of
experience.

Experience: Experience with or substantial knowledge in
most of the following areas:

• analysis of
  malicious code
• reverse
  engineering
• programming
  languages including C, assembly, and Python
• software
  development
• database
  technologies
• theoretical
  underpinnings of computer security

Experience
with or substantial knowledge is
preferred in many of the following areas:

• compiler
  design and/or program comprehension
• statistical
  methods
• static
  program analysis tools
• data
  visualization
• graph
  theory
• publishing
  academic research papers

Additionally, knowledge or
familiarity with the best practices for secure code development.

Skills/Abilities:  Must have the following abilities and skills:

• develop and
  lead technical research projects
• analytical and
  problem solving skills
• develop and
  explain technical decisions
• prioritize work
• interact
  effectively with technical and non-technical audiences both written and
  verbally
• work within a
  closely coordinated team
• work calmly and
  well under pressure
• maintain
  composure while dealing with difficult people
• recognize and
  deal appropriately with confidential and sensitive information
• communicate
  effectively under normal and stressful situations
• handle shifting
  priorities
• mentoring/training
  skills

Mobility:
Primarily sedentary in an office setting with some mobility. Able to travel to
various locations within the SEI and CMU community, sponsor sites, conferences,
and offsite meetings on occasion.

Environmental Conditions:  Normal office conditions; close contact with computer
screen for extended periods of time.

Mental:  The ability to:

• Work
  meticulously with attention to detail
• Meet
  deadlines while working on multiple tasks – sometimes under pressure and with
  shifting priorities
• Deal
  collaboratively, diplomatically, and successfully with customers, co-workers,
  and other professional colleagues, managers, and staff
• Grasp
  the big picture, direction, and goals of an effort
• Develop
  and communicate innovative ideas
• Take
  leadership role in technical projects
• Quickly
  learn new procedures, techniques, and approaches

Other:  Candidates must be able to pass a
background investigation, obtain a DOD TS/SCI security clearance, and be a US
citizen.

To Apply:

Careers@CarnegieMellon makes it easy for you to search for positions at the SEI
that match your interests, apply for positions electronically, and create a Job
Agent that will notify you be email when jobs that meet your criteria become
available.


Please visit the Careers@CarnegieMellon website
(https://secured.kenexa.com/cmu/cc/Home.ss) to create a profile and apply to
this position (job number 6305).