Malware Analysis Intern - Summer 2027

About the job

What We Do: The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Our core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time.

Position Summary
You will work as a part of the Threat Analysis Directorate within CERT and will collaborate with a group of security experts focused on advancing the state of the art and practice for analyzing, assuring, and countering software systems to enhance National Security.

You will assist members of the Malware Analysis Team and develop new and innovative tools that drive automation in the malware analysis process.
You will research and analyze complex problems, leveraging both AI and traditional reverse engineering methods to meet the challenges of a rapidly evolving threat landscape.

You will analyze malware to thoroughly understand the given malware sample or family and develop tools to help responders deal with sophisticated, novel threats.

• You will contribute to a variety of core functions including:
• Tool development and automation
• Malware analysis and reverse engineering capability development
• Program analysis research
• Emerging threats analysis

• Requirements:
• Enrolled in a degree granting program.
• Willingness to travel to various locations to support the SEI’s overall mission. This includes within the SEI and CMU community.
• You will be subject to a background check and must be eligible to work in the United States without Visa sponsorship.

• Knowledge, Skills and Abilities:
• Ability to critically think and problem solve
• Familiarity with a low-level computer programming a language, such as C or C++
• Familiarity with a scripting language, such as python
• Basic knowledge of common cybersecurity tools, such as system and network monitoring tools (e.g. Microsoft Sysinternals)
• Ability to collaborate internally and externally with professional engineers and researchers
• Willingness to learn new technologies with cross-functional teams
• Must be organized, detail-oriented, and have the capacity to clearly document and communicate any findings

• Desired Experience:
• Experience with static binary or malware analysis
• Experience with technical writing
• Research experience
• Experience with debugging
• These experiences may also come from education-driven experiences or extracurriculars.

• Job Function Breakdown:
• Binary analysis, to include the use of reverse engineering tools such as Ghidra and IDA Pro on a variety of microprocess architectures: 25%

• Script and tool development to automatically extract key indicators: 25%
• Design and prototype new analysis and tools: 25%
• Analyze and document complex security threats: 25%
• TOTAL = 100%

This position will be onsite at the Pittsburgh office 5 days a week.

Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran.

• Location
• Pittsburgh, PA Job Function
• Non-CMU Students Position Type
• Intern (Fixed Term) Full time/Part time
• Full time Pay Basis
• Hourly More Information:
• Please visit “ Why Carnegie Mellon ” to learn more about becoming part of an institution inspiring innovations that change the world.

• Click here to view a listing of employee benefits

• Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran .

• Statement of Assurance