Senior Malware Analyst (Media, Malware, and Analysis – MMA) MD TS/SCI CI POLY

SIXGEN; Annapolis (MD); On-site; USD 140,000 - 180,000; Full time

Job summary

SIXGEN is seeking a Senior Malware Analyst to support USCYBERCOM operations from the Annapolis area. You will conduct deep malware analysis, forensics, and threat intelligence to identify TTPs and inform defensive and offensive cyber missions.

The role requires a Top Secret clearance with SCI eligibility, 8+ years of hands-on experience, and proficiency with IDA Pro, Ghidra, and Wireshark to deliver timely intelligence and technical reports for leadership.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics, or related field (or equivalent).
• 8+ years of experience in malware analysis, reverse engineering, and incident response.
• Active TS/SCI clearance with polygraph eligibility.

Responsibilities

• Conduct static and dynamic malware analysis, reverse engineering, and forensic examination of compromised systems and media.
• Develop indicators of compromise, signatures, and detection approaches to support defensive operations.
• Analyze cyber threat intelligence to identify trends and inform decision-making.
• Support incident response activities and improve response procedures.
• Collaborate across teams to enhance malware analysis platforms and DoD cyber situational awareness.

Skills

Malware analysis

Reverse engineering

Incident response

Technical reporting

Network protocol knowledge

Education

Bachelor's degree in Computer Science or related field

Tools

IDA Pro

Ghidra

Wireshark

Volatility

Sandbox environments

Job description

Senior Malware Analyst (Media, Malware, and Analysis – MMA) US CITIZEN ONLY

Job Type: Full-time

Location: Annopolis Junction, MD

Clearance Requirement: TS/SCI with CI polygraph

Position Description

The Senior Malware Analyst provides advanced technical expertise in malware analysis, digital forensics, and cyber threat intelligence in support of USCYBERCOM cyberspace operations. This role directly supports operations across USCYBERCOM J3, Cyber National Mission Force (CNMF), and Joint Task Force-Ares (JTF-ARES), delivering critical insights into adversary tactics, techniques, and procedures (TTPs) targeting the Department of Defense Information Network (DODIN) and associated mission systems.

The analyst performs deep technical analysis of malicious code, compromised systems, and digital media to identify threats, develop mitigation strategies, and enhance operational situational awareness. This position contributes to mission assurance, defensive cyberspace operations (DCO), and offensive cyberspace operations (OCO) by enabling timely, actionable intelligence and supporting enterprise cyber defense and exploitation capabilities.

Key Responsibilities

• Conduct static and dynamic malware analysis, reverse engineering, and forensic examination of compromised systems and digital media to identify adversary TTPs and intrusion artifacts.
• Perform media exploitation and forensic analysis, including extraction and analysis of malicious files, logs, and system artifacts across Windows, UNIX/Linux, and network environments.
• Develop and disseminate technical intelligence reports, threat briefs, and executive summaries to support operational decision-making and leadership awareness.
• Identify and develop indicators of compromise (IOCs), signatures, heuristics, and MD5 hash repositories to support detection and mitigation strategies.
• Analyze and correlate cyber threat intelligence (all-source, SIGINT, and technical data) to identify patterns, anomalies, and emerging threats.
• Support incident response activities, including policy development, after-action analysis, and improvement of response procedures.
• Conduct trend analysis and risk assessments to evaluate threat posture and inform defensive and offensive cyberspace operations.
• Collaborate with operational, intelligence, and technical teams across USCYBERCOM to enhance situational awareness and coordinated cyber response.
• Support development and enhancement of enterprise malware analysis platforms and tools and contribute to DoD cyber situational awareness systems.
• Provide subject matter expertise to Operational Planning Teams (OPTs), crisis action teams, and ongoing operations, including support to contingency and mission planning.

Required Qualifications

• Active Top Secret clearance with SCI eligibility (Polygraph required).
• Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics, or related field (or equivalent experience).
• 8+ years of experience in malware analysis, reverse engineering, and incident response.
• Proficiency with tools such as IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments.
• Strong knowledge of network protocols, operating systems internals, and cyber threat analysis methodologies.
• Demonstrated ability to produce high-quality analytical products (reports, briefings, technical documentation) under tight timelines.

Desired Qualifications

• Master's degree in Cybersecurity, Information Security, or related discipline.
• Experience supporting USCYBERCOM, Joint operations, or DoD cyber missions.
• Certifications such as GREM, GCFA, GCTI, CREA, CMA, or DFIR-related credentials.
• Experience integrating AI/ML or data science techniques into cyber analysis workflows.