Malware Analyst

Peraton•Herndon, VA

80d•$80,000 - $128,000•Onsite

About The Position

We are seeking a highly skilled and innovative Malware Analyst to join our team in the greater DMV area, supporting the Army National Guard.

2 years with BS/BA; 0 years with MS/MA; 6 years with no degree
Active TS/SCI clearance.
Bachelor’s degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering; OR Relevant DoD/military training (documented reverse engineering or malware analysis coursework); OR Relevant professional certification or equivalent experience (examples: RCCE Level 1; CHFI).
Malware analysis, reverse engineering, or incident response experience in enterprise or DoD contexts.
Hands‑on proficiency with static analysis tools (IDA Pro, Ghidra), dynamic analysis/sandboxing (Cuckoo, REMnux), and binary/PE/ELF analysis techniques.
Familiarity with malware unpacking, decryption, API/IOC extraction, memory forensics, and common obfuscation/packing methods.
Ability to produce clear, reproducible analysis artifacts (YARA rules, IOCs, behavior profiles) and communicate findings to technical teams.
Basic scripting/programming skills (Python, C/C++, or assembler) for tooling, automation, and analysis tasks.

Prior DoD/ARNG or classified‑environment malware analysis experience.
Experience integrating analysis outputs into detection engineering, threat intel platforms, and SOAR playbooks.
Advanced certifications or coursework in reverse engineering, malware forensics, or related GIAC/ICS credentials.

Perform static and dynamic malware analysis to identify functionality, persistence mechanisms, indicators of compromise, and adversary techniques.
De‑obfuscate code, inspect binaries, and execute controlled sandbox detonations to observe malware behavior and system/network interactions.
Extract, validate, and format IOCs and behavioral signatures for ingestion by detection engineering, SOAR playbooks, and threat‑intelligence platforms.
Document analysis workflows, results, and mitigation recommendations in technical reports to support incident response and remediation.
Collaborate with senior analysts to refine reverse‑engineering methods, tooling, and repeatable analysis pipelines.
Support SOC/CIRT investigations by providing timely technical context, evidence artifacts, and analytic inputs for containment and eradication.
Contribute to knowledge sharing, playbook updates, and training resources to improve team analytic capability and consistency.