Malware Analyst Intern

Malware Analyst Intern (Part-time)
Company Description
THD Cybersecurity Joint Stock Company (THD - Tran Hung Dao) is a Vietnam-based cybersecurity company dedicated to protecting the information systems and digital assets of enterprises and organizations.
Inspired by the strategic thinking and resilience of General Tran Hung Dao, THD delivers practical cybersecurity solutions aligned with international standards and tailored to the Vietnamese market. Our services include SOC-as-a-Service, vulnerability assessment and penetration testing, malware analysis, data protection, ISO/NIST compliance consulting, and secure digital transformation.
Role Description
We are looking for a part-time, on-site Malware Analyst Intern based in Ho Chi Minh City. The intern will support malware research and analysis activities under the guidance of experienced security engineers.
You will gain hands-on experience in examining suspicious files, analyzing malware behavior, identifying indicators of compromise, and documenting technical findings. This position is suitable for students or recent graduates interested in malware analysis, reverse engineering, digital forensics, and threat research.
Key Responsibilities
Assist in performing static and dynamic analysis of suspicious files and malware samples.
Analyze malware behavior, including process creation, file system activity, registry modifications, network communications, and persistence mechanisms.
Examine executable files, particularly Windows Portable Executable (PE) files.
Use debugging and reverse-engineering tools to understand malware functionality.
Analyze network traffic and identify suspicious connections, protocols, and communication patterns.
Extract and document indicators of compromise, such as file hashes, domains, IP addresses, URLs, registry keys, and file paths.
Assist in classifying malware and identifying associated tactics, techniques, and procedures.
Conduct malware analysis in controlled laboratory and sandbox environments.
Prepare clear technical reports and analysis summaries.
Research emerging malware families, attack techniques, vulnerabilities, and analysis tools.
Contribute to internal malware analysis playbooks, technical documentation, and knowledge bases.
Follow established security, confidentiality, and malware-handling procedures.
Foundational Knowledge
Currently pursuing or recently completed a degree in Information Security, Cybersecurity, Information Technology, Electronics and Telecommunications, Computer Science, or a related field. Candidates with a strong demonstrated interest in programming or cybersecurity are also encouraged to apply.
Basic understanding of operating system internals, particularly Windows Internals or Linux Internals.
Familiarity with concepts such as processes, threads, the Windows Registry, dynamic-link libraries, system APIs, and API hooking.
Solid understanding of computer networking, including the OSI model, TCP/IP, DNS, HTTP/HTTPS, and packet analysis.
Basic knowledge of executable file structures, particularly the Windows Portable Executable format.
Awareness of common malware behaviors, persistence techniques, and indicators of compromise is an advantage.
Technical Skills
Ability to read or write basic code in at least one of the following languages:
Python
C/C++
x86/x64 Assembly
Basic familiarity with behavioral analysis and system-monitoring tools such as:
Process Monitor
Process Explorer or Process Hacker
Regshot
Wireshark
Basic familiarity with reverse-engineering, debugging, and malware sandbox tools such as:
IDA Pro
Ghidra
x64dbg
Cutter
Cuckoo Sandbox
ANY.RUN
VirusTotal
Ability to read and understand technical documentation, security advisories, and malware analysis reports.
Strong analytical and problem-solving skills with close attention to detail.
Ability to document analysis steps and technical findings clearly.
Willingness to learn, receive feedback, and collaborate effectively with team members.
Preferred Qualifications
Experience with malware analysis labs, Capture the Flag competitions, reverse-engineering exercises, or personal security research projects.
Familiarity with debugging, disassembly, decompilation, or unpacking techniques.
Basic understanding of obfuscation, anti-debugging, anti-virtualization, and malware persistence techniques.
Familiarity with YARA rules, Sigma rules, MITRE ATT&CK, or indicators of compromise.
Experience setting up and operating isolated virtual machines or malware analysis environments.
Relevant cybersecurity courses, certifications, or personal projects are an advantage but not required.
What You Will Gain
Hands-on experience with real-world malware analysis workflows.
Practical knowledge of static analysis, dynamic analysis, debugging, and reverse engineering.
Guidance and mentorship from experienced cybersecurity professionals.
Experience using professional malware analysis tools and controlled laboratory environments.
Opportunities to improve technical research, analysis, and reporting skills.
Potential opportunities for long-term employment based on performance and business needs.