> Markdown version of [/jobs/ext/2311676-malware-analyst-reverse-engineer-hybrid](https://www.wearedevelopers.com/jobs/ext/2311676-malware-analyst-reverse-engineer-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Malware Analyst Reverse Engineer (Hybrid) - **Company:** Allstate - **Location:** Belfast, UK - **Experience:** Expert - **Salary:** £90,000.0 - £105,000.0 - **Contract:** Permanent contract - **Skills:** .NET Framework, Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Data Analysis, Apple Mac Systems, Software System Penetration Testing, Bash Shell, Unix, C++ (Programming Language), Cyber Security, Custom Software, Software Debugging, Linux, Perl (Programming Language), VMware ESX Servers, Intrusion Detection Systems, Python (Programming Language), Packet Analyzer, OllyDBg, Windows PowerShell, Reverse Engineering, Virtual Machines, Software Vulnerability Management, Web Applications, WinDBg, Malware, Cyber Threat Analysis, Firewalls (Computer Science), IDA Pro, Vulnerability Analysis, Golang, Vmware, Programming Languages - **Published:** August 30, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815593853-malware-analyst-reverse-engineer-hybrid ## About the Role * Advanced experience with reverse engineering tools like IDA Pro, Ghidra, OllyDbg, WinDbg, and BinaryNinja. * Ability to reverse engineer binaries of various types including: x86, x64, C, C++, and .NET. * Deep understanding of x86, ARM, and x64 architectures. * Strong understanding of Windows Operating System Internals, Windows APIs, and writing and analyzing DLLs. * Strong experience with programming languages (Python, Bash, PowerShell, Perl, C/C++, Go). * Recent experience developing custom software and hardware tools to assist in performing reverse engineering and vulnerability analysis. * Expert understanding of large, complex corporate network environments. * 5+ years overall technical experience in either reverse engineering/malware analysis, threat intelligence, incident response, security operations, or related information security field. * 2+ years' experience performing direct reverse engineering/malware analysis. Desirable Skills * Obtained certifications in several of the following: * SANS GIAC courses, GREM, CISSP, OSCE, OSCP, CREST CRT, CEH or tool-specific certifications * Experience in penetration testing, ethical hacking, exploit writing, and vulnerability management * Strong communication (oral, written, presentation), interpersonal and consultative skills, especially regarding white papers, briefs, and presentations. ## Description The Allstate Information Security (AIS) department is responsible for managing cyber security at Allstate. This includes Governance/Risk/Compliance, Access Management, Network Security, and Threat Response Services. The department is responsible for ensuring confidentiality, integrity, and availability of Allstate systems., We are seeking an experienced Malware Analyst/Reverse Engineer to perform malware analysis and reverse engineering in support of incident response, investigative analysis, threat hunting, and research on existing and emerging cyber threats. The role will involve in-depth analysis of static and behavioral analysis of complex malicious code utilizing various tools, including disassemblers, debuggers, hex editors, un-packers, virtual machines, and network sniffers. The candidate will perform the functions of malware analyst/reverse engineer and serve as a liaison for Threat Services for the Global Fusion Center, and mentor and collaborate with the threat hunting, incident handling/response, and forensics teams., * Use expertise in malware analysis/reverse engineering to evaluate and analyze complex malicious code * Perform reverse engineering for suspected or known malware files, determining the TTPs associated with the code * Develop custom tools designed to automate analysis * Perform research around malicious software, vulnerabilities, and exploitation tactics, and recommend preventative or defensive action * Produce detailed reports identifying attributes and functionality of malware, and IOCs that can be used for malware identification/detection, to include behavior, identified infrastructure used for command and control, and mitigation techniques * Assist in identifying (hunting) and profiling threat actors and TTPs * Develop host and network-based signatures to identify specific malware via heuristic and/or anomaly-based detection methods * Participate in formal technical briefing and proposals * Perform as an Information Security SME in the some of the following areas: Malicious code behavior; Threat Intelligence; Incident Response; Web Application; Program Languages; Operating System platforms (Windows, Linux, OSX, UNIX, VM Ware ESX); Networking (firewalls, IDS/IPS, packet capture) * Providing mentorship and support to teammates regarding malicious file analysis/behavior, communication/rapport with other divisions and various levels of leadership, technical expertise, and career development * Capable of identifying need & driving solutions, and providing guidance, in an autonomous manner ## Related Videos - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)