Senior Malware & Forensic Analyst - Threat Detection Lead

Peraton; Georgia; On-site; USD 120,000 - 170,000; Full time

Job summary

Peraton is seeking a Senior Forensic and Malware Analyst to support ARCYBER G3 at Fort Gordon, GA. The role focuses on malware analysis, reverse engineering, and digital forensics across static, dynamic, and hybrid techniques.

Candidates should hold required IA certifications, be a US citizen, and possess TS/SCI with Poly eligibility. The team collaborates with mission partners to contextualize threats and develop detection content.

Qualifications

• Requires high-level security clearances and US citizenship.
• Minimum years of experience by degree; alternative HS/Associates paths.
• Experience with malware analysis, static/dynamic/hybrid techniques.
• Ability to examine suspicious software and perform reverse-engineering.

Responsibilities

• Update FMA SOPs, TTPs, CSSP, and website information.
• Contextualize malware findings with partners and intelligence professionals.
• Conduct malware analysis/reverse engineering of compiled and non-compiled malware content.
• Develop/write malware detection signatures (e.g., YARA) and threat-hunting artifacts.
• Conduct dead-box and live forensic analysis; collect and transfer forensic evidence.
• Perform network forensics by inspecting PCAPs for indicators and anomalies.
• Conduct mobile device forensics using dedicated lab tools.

Skills

PowerShell

Python

Bash

Malware analysis

Reverse engineering

Forensics

Education

BS/BA in STEM

MS/MA in STEM

PhD in STEM

High School + 16 yrs exp

Associates +14 yrs exp

Tools

CCNA-Security

CCNA-Cybersecurity

CySA+

GICSP

GSEC

Security+

CND

SSCP

Job description

Peraton is seeking a Senior Forensic and Malware Analyst to support ARCYBER G3 at Fort Gordon, GA. The role focuses on malware analysis, reverse engineering, and digital forensics across static, dynamic, and hybrid techniques.

Candidates should hold required IA certifications, be a US citizen, and possess TS/SCI with Poly eligibility. The team collaborates with mission partners to contextualize threats and develop detection content.