Active Exploitation Instructor

Bachelor’s Degree plus two (2) years of experience in Cyberspace Operations (CO). Experience in CO is defined as experience in Defensive Cyberspace Operations (DCO) or Offensive Cyberspace Operations (OCO). In lieu of a degree, four (4) years of experience in Cyberspace Operations (CO). Experience in adult learning with an emphasis on providing instruction to large classes. US Military instructor certification or designation is highly desirable (e.g., teaching certificate, certified professional instructor, master training specialist, adjunct faculty certification, etc.). NTFS/EXT file systems (Understand file system structure and layout, understand how to navigate and search the file system for files of interest during an investigation) Must be able to conduct analysis (dynamic or static) on a file and identify the type of malware present, including understanding how the malware operates. Must be familiar with the following tools and the basic techniques used to conduct an investigation: EnCase, Sleuth Kit, Helix. Should be familiar with general concepts (keyword search, file system navigation, locating hidden files, file extraction, etc.). Must be familiar with the following common tools used to conduct malware analysis in a static or dynamic environment: Process Explorer, Process Monitor, Regshot, OllyDbg, IDA Pro, Wireshark Should be familiar with the common usage of the tools and be able to explain what each tool does and why it is used. 3-5 years as a Forensics or Malware Analyst GIAC Reverse Engineering Malware (GREM), Certified Reverse Engineering Analyst (CREA), EnCase, or GIAC Certified Forensic Analyst (GCFA) is desired.