Malware Analyst

We are seeking a highly skilled and innovative Malware Analyst to join our team in the greater DMV area, supporting the Army National Guard.

Responsibilities

• Perform static and dynamic malware analysis to identify functionality, persistence mechanisms, indicators of compromise, and adversary techniques.
• De‑obfuscate code, inspect binaries, and execute controlled sandbox detonations to observe malware behavior and system/network interactions.
• Extract, validate, and format IOCs and behavioral signatures for ingestion by detection engineering, SOAR playbooks, and threat‑intelligence platforms.
• Document analysis workflows, results, and mitigation recommendations in technical reports to support incident response and remediation.
• Collaborate with senior analysts to refine reverse‑engineering methods, tooling, and repeatable analysis pipelines.
• Support SOC/CIRT investigations by providing timely technical context, evidence artifacts, and analytic inputs for containment and eradication.
• Contribute to knowledge sharing, playbook updates, and training resources to improve team analytic capability and consistency.

#ENOCS

Qualifications

• 2 years with BS/BA; 0 years with MS/MA; 6 years with no degree

• Clearance: Active TS/SCI clearance.

• Candidate must meet ONE of the following:

  • Bachelor’s degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering; OR
  • Relevant DoD/military training (documented reverse engineering or malware analysis coursework); OR
  • Relevant professional certification or equivalent experience (examples: RCCE Level 1; CHFI).

• Required experience and skills:

  • Malware analysis, reverse engineering, or incident response experience in enterprise or DoD contexts.
  • Hands‑on proficiency with static analysis tools (IDA Pro, Ghidra), dynamic analysis/sandboxing (Cuckoo, REMnux), and binary/PE/ELF analysis techniques.
  • Familiarity with malware unpacking, decryption, API/IOC extraction, memory forensics, and common obfuscation/packing methods.
  • Ability to produce clear, reproducible analysis artifacts (YARA rules, IOCs, behavior profiles) and communicate findings to technical teams.
  • Basic scripting/programming skills (Python, C/C++, or assembler) for tooling, automation, and analysis tasks.

• Desired:

  • Prior DoD/ARNG or classified‑environment malware analysis experience.
  • Experience integrating analysis outputs into detection engineering, threat intel platforms, and SOAR playbooks.
  • Advanced certifications or coursework in reverse engineering, malware forensics, or related GIAC/ICS credentials.

#ENOCS