Maleware Reverse Engineer (Several Levels)

Parsons; Maryland; On-site; USD 90,000 - 150,000; Full time

Job summary

Parsons seeks an experienced Malware Analyst to perform malware analysis, reverse engineering, and evidence handling for cyber investigations. You will develop scripts for triage, extract indicators of compromise, and prepare detailed Malware Analysis Reports.

Required are active clearance and hands-on malware experience with tools like IDA Pro or Ghidra. The role involves collaboration with investigators and cybersecurity teams across multiple levels.

Qualifications

• Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice or related field; four years of hands-on experience may substitute for degree.
• Experience performing software reverse engineering using IDA Pro, Ghidra, or equivalent tools.
• Hands-on digital-forensics, malware-analysis, and reverse-engineering experience appropriate to the assigned level.
• Experience performing static and dynamic malware analysis and interpreting malicious binary behavior.

Responsibilities

• Perform static and dynamic analysis of malware and potentially malicious files.
• Conduct software reverse engineering of malicious binaries to determine behavior, extract indicators of compromise, and identify potential attribution.
• Develop or maintain scripts and analytical utilities for malware triage and artifact extraction.
• Identify indicators of compromise, persistence mechanisms, lateral movement, and C2 activity.
• Maintain accurate chain-of-custody documentation and ensure evidence is handled per procedures.
• Prepare complete, technically accurate Malware Analysis Reports.
• Validate malware-analysis tools and develop/maintain scripts with version-control.

Skills

Active Secret clearance

SCI eligibility

Malware analysis

Reverse engineering

IDA Pro / Ghidra

Forensic reporting

Documentation

Independent work

Team collaboration

Education

Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, IT, Criminal Justice

Four years hands-on digital-forensics or malware-analysis experience (substitutes for degree)

Tools

IDA Pro

Ghidra

Binary Ninja

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible.

Job Description

Parsons is looking for an amazingly talented Malware Analyst (Several Levels) to join our team! In this role, you will perform malware analysis and software reverse engineering to identify malicious behavior, extract indicators of compromise, and support cyber investigations.

What You'll Be Doing

• Perform static and dynamic analysis of malware and potentially malicious files.
• Conduct software reverse engineering of malicious binaries to determine behavior, extract indicators of compromise, and identify potential attribution.
• Develop or maintain scripts and analytical utilities for malware triage, artifact extraction, timeline development, and repetitive examination tasks.
• Identify indicators of compromise, persistence mechanisms, lateral-movement activity, command-and-control activity, privilege escalation, credential abuse, and other adversary behaviors.
• Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.
• Maintain accurate chain-of-custody documentation and ensure evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
• Prepare complete, technically accurate, and professionally formatted Malware Analysis Reports.
• Validate malware-analysis tools, document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices, as assigned.
• Participate in technical peer reviews of forensic reports and incorporate review comments.
• Support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
• Support quality-assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
• Support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
• Provide technical input to training, mentorship, process-improvement, and lessons-learned activities.

What Required Skills You'll Bring

• Active Secret clearance; Top Secret clearance with SCI eligibility is preferred.
• Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field. Four years of hands-on digital-forensics, malware-analysis, or reverse-engineering experience may be substituted for the degree.
• Proven experience performing software reverse engineering using IDA Pro, Ghidra, or equivalent tools.
• Hands-on digital-forensics, malware-analysis, and reverse-engineering experience appropriate to the assigned level
• Malware Analyst 1: Minimum of two years
• Malware Analyst 2: Minimum of five years
• Malware Analyst 3: Minimum of eight years
• Malware Analyst 4: Minimum of 12 years.
• Experience performing static and dynamic malware analysis and interpreting malicious binary behavior.
• Ability to identify indicators of compromise, adversary behaviors, persistence mechanisms, lateral movement, command-and-control activity, privilege escalation, and credential abuse.
• Experience maintaining chain-of-custody documentation and handling evidence in accordance with laboratory procedures and security requirements.
• Ability to prepare accurate, complete, and professionally formatted Malware Analysis Reports.
• Strong analytical, investigative, technical, documentation, and written communication skills.
• Ability to work independently and collaborate effectively with investigators, cybersecurity personnel, technical reviewers, government representatives, and multidisciplinary teams.

What Desired Skills You'll Bring

• At least one active certification, or an equivalent certification approved by the COR, including:GIAC Reverse Engineering MalwareEC-Council Certified Reverse Engineering AnalystDC3 Cyber Training Academy Digital Forensic ExaminerGIAC Certified Forensic AnalystComputer Hacking Forensic Investigator
• Formal training dedicated to expert-witness testimony, rules of evidence, and courtroom procedure, such as DC3's 40-hour Forensic Trial Training course, completed within the last three years when required for assigned duties.
• Experience analyzing Windows, Linux, macOS, mobile, embedded, or cloud-based malware.
• Experience using IDA Pro, Ghidra, Binary Ninja, debuggers, disassemblers, sandbox environments, or comparable reverse-engineering tools.
• Experience developing scripts and analytical utilities for malware tria