Senior Malware & Digital Forensics Lead

Peraton; Augusta (GA); On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton seeks a Senior Forensic and Malware Analyst to support ARCYBER G3. Location: Fort Gordon, GA. Responsibilities include updating SOPs and TTPs, coordinating with partners, and conducting malware analysis with reverse engineering to characterize capabilities.

Key tasks include developing YARA rules, maintaining forensics artifacts, and delivering written reports and regular briefings to leadership. The role requires extensive experience and active security clearances as listed.

Qualifications

• Requires high-level malware analysis, reverse engineering, and forensic skills.
• Proficiency with scripting for automation of analysis tasks.
• Experience with IA and security certifications is expected.

Responsibilities

• Update SOPs, TTPs, CSSP, and website information for FMA.
• Coordinate with partners to contextualize malware findings.
• Perform malware analysis and reverse-engineering of executables.
• Develop and maintain malware signatures (YARA) for detection.
• Produce case notes and written reports; brief leadership regularly.
• Conduct static and live forensic analyses and collect evidence.
• Analyze PCAPs and network artifacts for indicators of compromise.
• Perform mobile device forensics using the mobile forensics lab.

Skills

Scripting (PowerShell, Bash, Python)

Malware analysis

Reverse engineering

Static/dynamic/hybrid forensics

PCAP/network analysis

Threat hunting

Team coordination

Forensic reporting

Education

BS/BA degree

MS/MA degree

PhD

Tools

YARA

Digital forensics tooling

Job description

Peraton seeks a Senior Forensic and Malware Analyst to support ARCYBER G3. Location: Fort Gordon, GA. Responsibilities include updating SOPs and TTPs, coordinating with partners, and conducting malware analysis with reverse engineering to characterize capabilities.

Key tasks include developing YARA rules, maintaining forensics artifacts, and delivering written reports and regular briefings to leadership. The role requires extensive experience and active security clearances as listed.