Senior Malware Threat Analyst — Forensic Lead & Intel

Koitecc Solutions; Odenton (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

Leidos is seeking a highly experienced malware analyst to support USCYBERCOM in threat identification and vulnerability assessment. The role involves leading forensic analysis, reverse engineering, and malware investigations, and delivering technical reports and leadership briefings.

You will develop and maintain hash repositories, analyze threat patterns, and work with cross-functional teams to improve situational awareness and defense capabilities. A TS/SCI with polygraph is required.

Qualifications

• Eight or more years of malware analysis, incident handling, and reverse engineering.
• Experience with IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments.
• Strong knowledge of network protocols and OS internals (Windows/Linux/UNIX).
• Familiarity with Blue-space Cyber capabilities and Defensive/Offensive Cyberspace Operations.

Responsibilities

• Provide timely, accurate support to USCYBERCOM in threat identification and vulnerability assessment.
• Lead forensic analysis and malware analysis including reverse engineering.
• Create technical reports and deliver threat briefs and leadership presentations.
• Develop and maintain validated MD5 hash lists for signature repositories.
• Collaborate with USCYBERCOM teams to enhance situational awareness and threat response.

Skills

Malware analysis

Incident handling

Reverse engineering

Network protocols

OS internals

Threat analysis

Communication skills

Education

Bachelor’s degree in Computer Science or related field

Tools

IDA Pro

Ghidra

Wireshark

Volatility

Sandbox environments

Job description

Leidos is seeking a highly experienced malware analyst to support USCYBERCOM in threat identification and vulnerability assessment. The role involves leading forensic analysis, reverse engineering, and malware investigations, and delivering technical reports and leadership briefings.

You will develop and maintain hash repositories, analyze threat patterns, and work with cross-functional teams to improve situational awareness and defense capabilities. A TS/SCI with polygraph is required.