Cyber Forensics & Malware Analyst — Incident Response Pro

Peraton; Fort Huachuca (AZ); On-site; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking a Cyber Forensics & Malware Analyst to conduct deep-dive investigations into cyber security incidents, analyze digital media and malicious software, and present evidence to technical and leadership audiences.

You will perform host- and network-based forensics, analyze binaries, develop detection signatures (YARA, Snort), mentor analysts, and work with incident response teams to harden defenses.

Qualifications

• 12+ years of experience without a BS/BA; 10+ with Associates; 8+ with BS/BA; 6+ with MA/MS.
• GCFA certification required.
• Active Top-Secret/SCI clearance or ability to obtain within 90 days of hire date.

Responsibilities

• Lead host- and network-based forensic investigations to identify root cause and scope of compromise.
• Collect, preserve, and analyze digital evidence from drives, memory, and logs.
• Perform static and dynamic analysis of malicious binaries to identify IOCs and infrastructure.
• Use debuggers, disassemblers, and virtualization tools to bypass packing and obfuscation techniques.
• Document findings in comprehensive investigation reports for technical and leadership audiences.
• Assist in threat intelligence efforts by attributing activities to known threat actors or APTs.
• Assist in the development of signatures (YARA, Snort) and mitigation strategies based on analysis findings.
• Collaborate with security operations and incident response teams to harden network defenses.
• Lead development of training plan and mentor analysts to ensure forensics processes are followed from incident start to end.

Skills

Defensive Cyber Operations

Incident response

Forensics analysis

Malware analysis

Education

GCFA certification

Top-Secret/SCI clearance

Tools

YARA

Snort

Job description

Peraton is seeking a Cyber Forensics & Malware Analyst to conduct deep-dive investigations into cyber security incidents, analyze digital media and malicious software, and present evidence to technical and leadership audiences.

You will perform host- and network-based forensics, analyze binaries, develop detection signatures (YARA, Snort), mentor analysts, and work with incident response teams to harden defenses.