Malware Analyst - Assistant VP - Jacksonville, FL

ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. All positions are onsite, unless otherwise stated.

Overview:
At Deutsche Bank, our defense is as sophisticated as the threats we face. The Information Security Threat Operations (ISTO) team is the front line, defending a global enterprise against thousands of daily intrusion attempts. You will be joining the Advanced Threat Response (ATR) group, an elite unit of specialists in digital forensics, malware analysis, and threat hunting. As a Malware Analyst for Malware Analysis and Incident Response, you will play a crucial role in understanding the malicious software impacting our organization during active incidents. This is a hands-on technical role where you will support the in-depth analysis of malware samples, from various threat actors and targeted attacks, to contribute to real-time incident response efforts.

What We Offer You:

• A diverse and inclusive environment that embraces change, innovation, and collaboration
• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days
• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement
• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
• Educational resources, matching gift and volunteer programs

• →Conduct in-depth analysis of malware involved in active security incidents, including ransomware, targeted attacks, and advanced persistent threats
• →Execute static and dynamic analysis, reverse engineering, and behavioral analysis of sophisticated malware samples across various operating systems (Windows, Linux, macOS)
• →Serve as a technical expert during critical security incidents, leveraging malware analysis findings to identify threat actor TTPs, develop containment strategies, and support rapid eradication and remediation efforts
• →Articulate basic technical findings from malware analysis into clear and concise documentation, contributing to internal threat intelligence reports for technical peers and supporting broader incident communication
• →Enhance and mature the team’s malware analysis capabilities by developing new analytical techniques, automating analysis workflows, creating custom tools, and improving detection signatures (e.g., YARA rules)

• Proven experience conducting in-depth static and dynamic malware analysis, reverse engineering, and behavioral analysis of sophisticated threats in an enterprise environment
• Hands-on expertise with industry-standard malware analysis tools (e.g., IDA Pro, Ghidra, x64dbg, malware sandboxes, Wireshark, Process Monitor) and methodologies for understanding malicious code
• Proficiency in at least one scripting language (e.g., Python, PowerShell) for automating malware analysis tasks, extracting artifacts, and developing custom analysis tools
• Deep understanding of Windows and Linux operating system internals, memory management, process execution, and network protocols relevant to malware behavior
• Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs

• Proven experience with advanced reverse engineering techniques, including obfuscation bypass, anti-analysis trick identification, and unpacking complex malware
• A strong understanding of the incident response lifecycle, threat actor methodologies (MITRE ATT&CK Framework), and the critical role of malware analysis in containment, eradication, and recovery
• Familiarity with analyzing malware behavior and artifacts in cloud environments (e.g., AWS, Azure, GCP) and understanding cloud-specific threats
• Ability to translate malware analysis findings into actionable threat intelligence, including YARA rules, Snort/Suricata signatures, and comprehensive threat reports
• A bachelor’s degree in computer science, Information Security, or a related field, or equivalent professional experience. One or more of the following certifications are highly preferred: GIAC Reverse Engineering Malware (GREM), OSCP, OSCE, or similar advanced malware analysis certifications