Job Description
Vacancy for the Post of Malware Analyst (01 Position)
Founded in 2006, the Sri Lanka Computer Emergency Readiness Team (Sri Lanka CERT) is Sri Lanka's National CERT which has the mandate to protect the nation's cyber space.
Sri Lanka CERT|CC, is currently seeking a passionate and committed individual to join its team as Malware Analyst of Malware Analysis and Threat Hunting (MATH) Lab. This role offers a unique opportunity to contribute to the nation's one of the premier cybersecurity initiatives.
Job Responsibilities
- In depth reverse engineering - Unpack and deobfuscate complex loaders and fileless malware (PowerShell, VBA, LOLBins). Conduct memory forensics with Volatility, Rekall, and kernel debugging (WinDbg, GDB).
- Cross platform expertise - Analyse Android APKs (Jadx, Frida) and macOS binaries (Mach-O, Hopper).
- Advanced detection & automation - Develop rule testing pipelines (YARA CI, Sigma CI) in GitLab; push signatures to SOC via Ansible.
- Leadership & mentoring - Review junior analysts’ Monthly Activity Reports, hold code review style Reverse Engineering sessions, run bi monthly capture the flag labs.
- Analyze malicious code to understand its functionality, impact, and potential mitigation strategies.
- Perform static and dynamic analysis of malware samples to identify their behavior and intent.
- Develop and maintain a malware repository for tracking known threats and their indicators of compromise (IOCs).
- Collaborate with threat hunters to provide intelligence on emerging malware trends and techniques.
- Create detailed reports on malware analysis findings, including technical details and recommended actions.
- Develop tools and scripts to automate malware analysis tasks.
- Stay current with the latest malware threats and trends in the cyber-security landscape.
- Conduct static and dynamic analysis of malware samples to identify behaviour, persistence mechanisms, and indicators of compromise.
- Analyze and detect malware across multiple environments—Windows, Linux, macOS, Android, and iOS—while developing reusable methodologies for cross-architecture investigations.
- Lead technical development of the malware analysis team by reviewing junior analysts’ activity reports to strengthen hands-on analytical capabilities.
Experience Requirements
- Five (05) years or above industry experience in the field of information and Cyber security or relevant out of which 02 years should be in a malware analysis, reverse engineering or a similar role at supervisory level within a reputed private sector cyber-security service provider, public corporation, statutory board, fully government owned company, or a reputed commercial establishment, after obtaining the first Degree.
- Experience in IDA Pro, Ghidra or similar tools.
- Encryption/compression algorithm recognition, exploit technique analysis.
- Python and PHP skills.
- Passionate about mastering the latest Cyber Threat Intelligence (CTI) tools and contributing to proactive cyber defense initiatives.
- Incident command experience, strong presentation abilities.
- Proficiency in reverse engineering tools (e.g., IDA Pro, OllyDbg).
- Strong understanding of programming languages and assembly languages.
- Experience with both static and dynamic analysis techniques.
- Skills in presentations, communication, teamwork.
Educational and Professional Qualifications
- A Bachelor's Degree (SLQF 5 or 6) in Information Security, Cyber-Security, Computer Science, Information Technology or any other field relevant to the post, obtained from a local or foreign university, recognized by the University Grant Commission (UGC) in Sri Lanka.
- Should hold a verifiable Cyber-security certification, preferably CEH, CHFI, GIAC GREM, GXPN, GMOB; OffSec OSEP / OSCE3; CREST CRT, CCNA or any other verifiable relevant certification relevant to the post. Such certifications must be maintained in active status.
What We Offer
- Opportunity to contribute to the national cybersecurity infrastructure.
- Hands-on experience with advanced cybersecurity tools and technologies.
- Competitive remuneration and allowances.
- Continuous training and career development opportunities.
- Local and overseas trainings (short term).
Salary will be based on current industry standards and includes travel allowances.
If you are confident that you are the ideal candidate for this position, e-mail your resume with a recent photo and two non-related referees to careers@cert.gov.lk within 14 days of this advertisement, stating “Malware Analyst – MATH Lab”. Only shortlisted candidates will be notified.
Note: This job description is not intended to be all-inclusive. Employees may perform other related duties as negotiated to meet the ongoing needs of Sri Lanka CERT and MATH Lab.
Chief Executive Officer
Sri Lanka Computer Emergency Readiness Team | Coordination Centre
Room 4-112, BMICH, Bauddhaloka Mawatha, Colombo 00700
Tel: 011 2691692 / 011 2679888