Cyber Forensics & Malware Investigator

Peraton; Northern (KY); Hybrid; USD 80,000 - 128,000; Full time

Job summary

Peraton seeks a Cyber Forensics & Malware Analyst to conduct deep-dive investigations into cyber incidents, digital media, and malicious software. You will identify, preserve, analyze, and present digital evidence while reverse-engineering malware to determine its origin, capabilities, and impact on the enterprise network.

Responsibilities include host- and network-based forensics, collecting evidence from drives, memory, and logs, and performing static and dynamic analysis of binaries to

Responsibilities

• Identify, preserve, analyze, and present digital evidence while reverse-engineering malicious code to determine origin, capabilities, and impact on the enterprise network.
• Conduct host-based and network-based forensic investigations to identify root cause and scope of compromise.
• Collect, preserve, and analyze digital evidence from hard drives, volatile memory, and network logs.
• Perform static and dynamic analysis of malicious binaries to identify indicators of compromise and infrastructure.
• Use debuggers, disassemblers, and virtualization tools to bypass packing and obfuscation techniques.
• Document technical findings in comprehensive investigation reports for technical and leadership audiences.
• Assist in threat intelligence efforts by attributing activities to known threat actors or APTs.
• Develop signatures (YARA, Snort, etc.) and mitigation strategies based on analysis findings.
• Collaborate with security operations and incident response teams to harden network defenses.
• Lead development of training plans and mentor analysts to ensure forensics processes are followed from incident start to end.

Job description

Peraton seeks a Cyber Forensics & Malware Analyst to conduct deep-dive investigations into cyber incidents, digital media, and malicious software. You will identify, preserve, analyze, and present digital evidence while reverse-engineering malware to determine its origin, capabilities, and impact on the enterprise network.

Responsibilities include host- and network-based forensics, collecting evidence from drives, memory, and logs, and performing static and dynamic analysis of binaries to