Senior Malware Analyst (Media, Malware, and Analysis – MMA) MD TS/SCI CI POLY

SIXGEN; Annapolis (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

SIXGEN seeks a Senior Malware Analyst (Media, Malware, and Analysis – MMA) to join our defense-focused team in Annapolis Junction, MD. The role emphasizes advanced malware analysis, forensics, and cyber threat intelligence to support DoD mission systems.

Active TS/SCI with CI polygraph is required, along with 8+ years in malware analysis, reverse engineering, and incident response. Proficiency with IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments is essential.

Qualifications

• 8+ years of experience in malware analysis, reverse engineering, and incident response.
• Proficiency with IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments.
• Strong knowledge of networks, OS internals, and threat analysis methodologies.
• Ability to produce high-quality analytical reports under tight timelines.

Responsibilities

• Conduct static and dynamic malware analysis, reverse engineering, and forensics on compromised systems.
• Perform media exploitation and forensic analysis across Windows, UNIX/Linux, and networks.
• Develop technical intelligence reports, threat briefs, and executive summaries.
• Identify indicators of compromise, signatures, and MD5 hash repositories.
• Analyze all-source, SIGINT, and technical data to identify threats and patterns.
• Support incident responses, policy development, and post-incident analysis.
• Conduct trend analysis and risk assessments to inform defensive operations.
• Collaborate with USCYBERCOM teams to enhance situational awareness and response.
• Support development of enterprise malware analysis platforms and DoD cyber tools.
• Provide subject-matter expertise to OPS teams and crisis action scenarios.

Skills

Malware analysis

Reverse engineering

Incident response

Threat intelligence

Digital forensics

OS & network knowledge

Education

Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics, or related field

Tools

IDA Pro

Ghidra

Wireshark

Volatility

Sandbox environments

Job description

Senior Malware Analyst (Media, Malware, and Analysis – MMA) US CITIZEN ONLY

Job Type

Full-time

Location

Annopolis Junction, MD

Clearance Requirement

TS/SCI with CI polygraph

Position Description

The Senior Malware Analyst provides advanced technical expertise in malware analysis, digital forensics, and cyber threat intelligence in support of USCYBERCOM cyberspace operations. This role directly supports operations across USCYBERCOM J3, Cyber National Mission Force (CNMF), and Joint Task Force-Ares (JTF-ARES), delivering critical insights into adversary tactics, techniques, and procedures (TTPs) targeting the Department of Defense Information Network (DODIN) and associated mission systems. The analyst performs deep technical analysis of malicious code, compromised systems, and digital media to identify threats, develop mitigation strategies, and enhance operational situational awareness. This position contributes to mission assurance, defensive cyberspace operations (DCO), and offensive cyberspace operations (OCO) by enabling timely, actionable intelligence and supporting enterprise cyber defense and exploitation capabilities.

Key Responsibilities

• Conduct static and dynamic malware analysis, reverse engineering, and forensic examination of compromised systems and digital media to identify adversary TTPs and intrusion artifacts.
• Perform media exploitation and forensic analysis, including extraction and analysis of malicious files, logs, and system artifacts across Windows, UNIX/Linux, and network environments.
• Develop and disseminate technical intelligence reports, threat briefs, and executive summaries to support operational decision-making and leadership awareness.
• Identify and develop indicators of compromise (IOCs), signatures, heuristics, and MD5 hash repositories to support detection and mitigation strategies.
• Analyze and correlate cyber threat intelligence (all-source, SIGINT, and technical data) to identify patterns, anomalies, and emerging threats.
• Support incident response activities, including policy development, after-action analysis, and improvement of response procedures.
• Conduct trend analysis and risk assessments to evaluate threat posture and inform defensive and offensive cyberspace operations.
• Collaborate with operational, intelligence, and technical teams across USCYBERCOM to enhance situational awareness and coordinated cyber response.
• Support development and enhancement of enterprise malware analysis platforms and tools and contribute to DoD cyber situational awareness systems.
• Provide subject matter expertise to Operational Planning Teams (OPTs), crisis action teams, and ongoing operations, including support to contingency and mission planning.

Required Qualifications

• Active Top Secret clearance with SCI eligibility (Polygraph required).
• Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics, or related field (or equivalent experience).
• 8+ years of experience in malware analysis, reverse engineering, and incident response.
• Proficiency with tools such as IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments.
• Strong knowledge of network protocols, operating systems internals, and cyber threat analysis methodologies.
• Demonstrated ability to produce high-quality analytical products (reports, briefings, technical documentation) under tight timelines.

Desired Qualifications

• Master's degree in Cybersecurity, Information Security, or related discipline.
• Experience supporting USCYBERCOM, Joint operations, or DoD cyber missions.
• Certifications such as GREM, GCFA, GCTI, CREA, CMA, or DFIR-related credentials.
• Experience integrating AI/ML or data science techniques into cyber analysis workflows.