Security Engineer, Malware Analysis

Facebook's mission is to give people the power to build community and bring the world closer together. Through our family of apps and services, we're building a different kind of company that connects billions of people around the world, gives them ways to share what matters most to them, and helps bring people closer together. Whether we're creating new products or helping a small business expand its reach, people at Facebook are builders at heart. Our global teams are constantly iterating, solving problems, and working together to empower people around the world to build community and connect in meaningful ways. Together, we can help people build stronger communities - we're just getting started. Facebook Security is looking for a Security Engineer, Malware Analysis with experience in malware analysis, reverse engineering, and detection. You will be analyzing malicious files and creating protections for Facebook's users and infrastructure. You will advance Facebook's mission of making the world more open and connected by quickly identifying and analyzing threats that aim to abuse Facebook, its platforms, or its community of users. We are looking for someone that is passionate about ripping apart binaries, discovering their intention and secrets, and creating signatures to hunt and proactively defend against threats. <ul><li>Surface and triage novel malware on our platforms, corporate networks, and third party submissions</li><li>In-depth malware analysis to support threat intelligence, incident response, and platform integrity</li><li>Create signatures (file, host, network) to detect, hunt, and prevent malware compromise</li><li>Create tooling to increase our ability to triage, respond, and understand malware</li><li>Advise and consult with other teams as a subject matter expert</li></ul> <ul><li>Experience with static and dynamic analysis tools for multiple systems and file formats</li><li>Knowledge in system internals for one or more of: Windows, macOS, Android, Linux, or iOS</li><li>Knowledge with machine code in one or more architectures (x86, x64, ARM, MIPS, other)</li><li>Knowledge with multiple file formats</li><li>Experience creating host or network based signatures (Yara, ClamAV, Suricata)</li><li>Experience developing parsers or decoders based on malware analysis</li><li>Experience analyzing and decoding network traffic</li><li>Experience in at least one of PHP, Python, C++, or Java</li><li>BA/BS in Computer Science or 3+ years similar work experience</li></ul> <ul><li>Experience with campaign tracking, threat intelligence, and TTPs of advanced actors</li><li>Experience with relational databases and SQL</li><li>Experience analyzing and processing large data sets</li><li>Demonstrated ability to work cross-functionally with different teams</li><li>Knowledge with multiple file formats (PE, ELF, APK, OLE, PDF, etc.)</li></ul> Facebook is proud to be an Equal Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.Facebook is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.