Vulnerability & Malware Researcher (Reverse Engineer)

Rippling, Inc.; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Partner Forces is seeking a highly technical Vulnerability & Malware Researcher (Reverse Engineer) to support a federal client, analyzing malware, vulnerabilities, and attacker techniques to improve detection and defense.

You will perform static and dynamic analyses, reverse engineer software and firmware, and develop IOCs, YARA rules, and detection signatures, collaborating with threat intelligence, SOC, and engineering teams.

Qualifications

• 3–8 years of experience in malware analysis or reverse engineering or related cybersecurity field.
• Hands-on experience with reverse engineering compiled software and malware analysis.

Responsibilities

• Perform static and dynamic analysis of malware to understand functionality and attacker objectives.
• Reverse engineer software and firmware to identify malicious behavior and exploit paths.
• Research vulnerabilities and assess security impacts in software, OS, and firmware.
• Investigate attacker TTPs and emerging exploitation methods.
• Develop IOCs, YARA/Sigma rules, and detection signatures for threat hunting.
• Build scripts and tools to improve malware analysis workflows.
• Collaborate with threat intel, incident response, SOC, and engineering to translate findings into recommendations.
• Document findings through reports and briefings.

Skills

Malware analysis

Reverse engineering

Threat intelligence

Python

Windows internals

Linux internals

Tools

Ghidra

IDA Pro

Binary Ninja

Job description

Vulnerability & Malware Researcher (Reverse Engineer)

Partner Forces is a management consulting firm helping homeland security organizations solve some of their most pressing and complex challenges. We partner with government agencies and industry to strengthen national security and critical infrastructure through expertise in strategy, program management, stakeholder engagement, technology implementation, preparedness, and business transformation.

At Partner Forces, we're more than consultants—we're trusted advisors. We work alongside our clients to solve meaningful problems, deliver actionable solutions, and make a lasting impact. As a growing firm, every employee has the opportunity to contribute not only to our clients' success, but also to the future of Partner Forces. We believe great consultants are developed through collaboration, mentorship, continuous learning, and meaningful opportunities to lead.

Our culture is grounded in six core values: Integrity, Excellence, Positivity, Candor, Determination, and Teamwork. These values shape how we work with our clients, support one another, and grow together. We believe that when our people thrive, our clients do too, which is why we invest in our employees' well-being, professional development, and long-term success.

What we are looking for:

Partner Forces is seeking a highly technical and curious Vulnerability & Malware Researcher (Reverse Engineer) to support critical cybersecurity initiatives for a federal client. In this role, you’ll dig into complex software, malware, and vulnerabilities to understand how they work, how adversaries may exploit them, and how cybersecurity teams can better detect and defend against emerging threats. We’re looking for someone who enjoys solving difficult technical problems, getting deep into code, and translating research into actionable security insights.

What you'll do:

• Perform static and dynamic analysis of malware to understand functionality, persistence mechanisms, command-and-control activity, and attacker objectives.
• Reverse engineer software and firmware to identify malicious behavior, vulnerabilities, and potential exploit paths.
• Research software, operating system, application, and firmware vulnerabilities and assess potential security impacts.
• Investigate adversary tactics, techniques, and procedures (TTPs) and emerging exploitation methods.
• Develop IOCs, YARA and Sigma rules, detection signatures, and other technical content that supports threat hunting and security operations.
• Build scripts, automation, and tools that improve malware analysis and reverse engineering workflows.
• Partner with threat intelligence, incident response, SOC, and engineering teams to translate technical research into actionable recommendations.
• Document and communicate technical findings through reports, briefings, and research products.

Qualifications

• TS Clearance
• 3–8 years of experience in malware analysis, reverse engineering, vulnerability research, offensive security, or a related technical cybersecurity field.
• Hands‑on experience reverse engineering compiled software and performing static and dynamic malware analysis.
• Experience with reverse engineering and debugging tools such as Ghidra, IDA Pro, Binary Ninja, or similar tools.
• Strong understanding of Windows and Linux internals.
• Knowledge of assembly language, including x86, x64, or ARM, and executable file formats.
• Proficiency in at least one programming language such as Python, C, C++, Rust, or Go.
• Understanding of software exploitation, memory corruption vulnerabilities, and common attack methodologies.
• Strong investigative and problem‑solving skills with the ability to clearly communicate highly technical findings.

Even better if you have...

• Experience researching zero‑day vulnerabilities or advanced exploitation techniques.
• Experience with nation‑state threats or sophisticated cyber campaigns.
• Experience analyzing firmware, embedded systems, or mobile applications.
• Experience supporting federal government, defense, intelligence community, or critical infrastructure cybersecurity missions.

Partner Forces is an equal opportunity employer. We do not discriminate based on race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by applicable law. We are committed to fostering a workplace where everyone feels valued and respected. If you require a reasonable accommodation during the application process, please contact us at [e-mail] .