Security Engineer, Malware Analysis Facebook
Washington, DC

Job Description

Facebook Security is looking for a Security Engineer, Malware Analysis with experience in malware analysis, reverse engineering, and detection. You will be analyzing malicious files and creating protections for Facebook's users and infrastructure. You will advance Facebook's mission of making the world more open and connected by quickly identifying and analyzing threats that aim to abuse Facebook, its platforms, or its community of users. We are looking for someone that is passionate about ripping apart binaries, discovering their intention and secrets, and creating signatures to hunt and proactively defend against threats.

RESPONSIBILITIES

* Surface and triage novel malware on our platforms, corporate networks, and third party submissions



In-depth malware analysis to support threat intelligence, incident response, and platform integrity

Create signatures (file, host, network) to detect, hunt, and prevent malware compromise

Create tooling to increase our ability to triage, respond, and understand malware

Advise and consult with other teams as a subject matter expert

MINIMUM QUALIFICATIONS

* Experience with static and dynamic analysis tools for multiple systems and file formats



Knowledge in system internals for one or more of: Windows, macOS, Android, Linux, or iOS

Knowledge with machine code in one or more architectures (x86, x64, ARM, MIPS, other)

Knowledge with multiple file formats

Experience creating host or network based signatures (Yara, ClamAV, Suricata)

Experience developing parsers or decoders based on malware analysis

Experience analyzing and decoding network traffic

Experience in at least one of PHP, Python, C++, or Java

BA/BS in Computer Science or 3+ years similar work experience

PREFERRED QUALIFICATIONS

* Experience with campaign tracking, threat intelligence, and TTPs of advanced actors



Experience with relational databases and SQL

Experience analyzing and processing large data sets

Demonstrated ability to work cross-functionally with different teams

Knowledge with multiple file formats (PE, ELF, APK, OLE, PDF, etc.)

Facebook is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at accommodations-ext@fb.com.