Salary by agreement
Minsk
Experience from 3 years
ActiveCloud The company's main activity is providing cloud infrastructure for hosting corporate systems, applications, and websites; providing services for auditing and migrating to the cloud, information security, design, and technical support for cloud solutions.
Our team has over 100 employees. These are highly qualified engineers in the field of IT infrastructure design and maintenance, networks, virtualization, and security, as well as experienced functional professionals.
We are developing our own Cybersecurity Center (CSC) and strengthening the team with a specialist in malware analysis and incident investigation.
You will participate in the creation of the company's cyber defense processes and influence the security architecture and practices.
What you will be doing
- Analyzing malware and cyber incidents (forensics, reverse engineering, sandbox);
- Identifying the causes of infections and attacks;
- Conducting static and dynamic analysis of suspicious files;
- Working with indicators of compromise (hash, IP, domain, URL, YARA, STIX/TAXII);
- Analyzing network traffic (PCAP, NetFlow);
- Preparing recommendations for incident prevention (technical and organizational measures);
- Participating in the development of information security regulations and standards;
- Sharing expertise within the team and participating in internal training.
Candidate Requirements:
- At least 3 years of experience in information security;
- Technical education (higher or secondary specialized).
- Knowledge of malware types (trojans, viruses, ransomware, rootkits, etc.);
- Skills in incident and log analysis;
- Experience with IoC (hash, IP, domains, YARA, etc.);
- English language at the level of reading technical documentation (B1).
- Desire to delve into complex technical tasks;
- Proficiency in reverse engineering. Ability to disassemble compiled code without source code using IDA Pro, Ghidra, Radare2, or x64dbg.
- Knowledge of programming languages. Low-level: Free reading and understanding of Assembler (x86/x64, ARM). System: Knowledge of C/C++. Confident command of Python or PowerShell.
- Deep knowledge of operating systems (deep understanding of Windows architecture (PE format, registry, API, memory management) and Linux).
- Proficiency in analysis methods: static and dynamic (malware analysis in an isolated environment (sandbox)).
- Detailed understanding of networks and protocols (understanding of TCP/IP stack, HTTP, DNS operation, and methods of virus interaction with command servers (C2)).
Will be a big plus
- Reverse engineering experience;
- Knowledge of ISO 27001/27035, NIST CSF standards;
- Understanding of RB legislation requirements in the field of information security;
- Professional certificates (CEH, OSCP, Security+, CISSP, etc.).
What we offer
- Participation in the development of ActiveCloud's Cybersecurity Center;
- Official employment;
- Probation period - 3 months;
- Voluntary medical insurance after the probation period and other partner programs;
- Corporate training and development;
- Vacation of 25 calendar days;
- Schedule 9:00-18:00, Mon-Fri;
- Work format: hybrid or remote;
- Office in the center of Minsk (st. Lenina, 50);
- Tea, coffee, and corporate events.
Employment type:
Full-time, Full working day, On-site
