Reverse Engineer 2 (CCAs Accepted)

As a Reverse Engineer 2 at Wyetech, you will focus on performing technical analyses of malicious binaries. This includes both controlled execution and static analysis of assembly code to uncover the functionality and intentions behind various malware types. You'll also work on associating adversary infrastructure with certain malware, assisting in attribution, and developing strategies for detection and mitigation.

To become a Reverse Engineer 2 at Wyetech, you need a Doctoral degree with 2 years of relevant experience, a Master's degree with 3 years, or a Bachelor's degree with 5 years of relevant experience in malware reverse engineering. Additionally, candidates must have certifications such as CISSP, GIAC GREM, or CREA and the appropriate security clearance.

A successful candidate for the Reverse Engineer 2 position at Wyetech should possess substantial knowledge in reverse engineering, particularly using tools like IDApro and Ghidra. Experience as a malware analyst specifically in EA Cyber Threats is also crucial. Familiarity with malware and threat analysis will set you apart.

Wyetech offers a robust benefits package for its employees in the Reverse Engineer 2 position. This includes a generous retirement plan where the company contributes 20% of gross compensation to a Simplified Employee Pension (SEP) IRA from day one. Employees also enjoy a flexible paid time off (PTO) plan, various medical plans, vision and dental coverage, as well as options for life and disability insurance.

Wyetech fosters an inclusive and supportive corporate culture where employees are valued. Various team-building activities, such as monthly lunches, picnics, and annual holiday parties, help build camaraderie. The company also emphasizes professional development and mobility across different contracts, making it a dynamic place to work.

When answering this question, provide specific examples of your experience in reverse engineering malware, outlining the methodologies and tools you've employed, such as IDApro or Ghidra. Discuss any notable projects and highlight your ability to analyze various types of malware.

A good response should detail your systematic approach, starting with a thorough static analysis, then moving to dynamic analysis in a secure environment. Highlight the importance of understanding indicators of compromise and call-backs to adversary infrastructure in your analysis.

Be prepared to discuss the tools you prefer, such as IDApro, Ghidra, or others, emphasizing your proficiency and how they've enhanced your analysis. Share your reasoning based on functionality, usability, and community support for these tools.

When responding, narrate a specific case, the challenges you faced, and the methods you employed to overcome them. Discuss what insights you gained from the experience and how it bolstered your skills as a reverse engineer.

You should highlight any resources you follow, such as blogs, forums, or professional networks. Mention specific conferences or courses you've attended that enhance your knowledge in malware reverse engineering and cybersecurity.

Discuss the role of attribution in understanding the threat landscape, helping governments or organizations formulate a strong defense strategy. Your answer should also reflect on the implications of failure to attribute correctly, leading to miscalculated security postures.

Explain your systematic approach for building detection signatures, focusing on identifying unique characteristics of the malware. Mention any tools or methodologies you utilize for efficiently generating and testing these signatures within environments.

List any relevant certifications, such as CISSP, GIAC GREM, or CREA, and elaborate on how each equips you for the Reverse Engineer 2 position. Share how continuous learning and certification pursuits benefit your skills and career.

Discuss a step-by-step strategy for troubleshooting the situation, including collaboration with team members, thorough documentation, and revisiting different analysis methodologies to unearth hidden layers of functionality.

Share your approach to risk assessments, focusing on how you identify, prioritize, and categorize various threats and their potential impacts. Well-rounded responses should incorporate both qualitative and quantitative assessments.