Forensics Malware Analyst / Reverse Engineer (Cleared)

Position: Forensics Malware Analyst / Reverse Engineer Clearance: Ability to obtain and maintain TS/SCI Work Environment: Secure / Classified Programs Position Overview We are seeking a highly skilled Forensics Malware Analyst / Reverse Engineer to support advanced digital forensics and cyber threat analysis efforts on classified programs. This role focuses on reverse engineering malicious software, conducting in-depth forensic analysis of compromised systems, and uncovering adversary tactics, techniques, and procedures (TTPs). The ideal candidate brings a strong blend of malware analysis, reverse engineering, and digital forensics experience and thrives in highly technical, mission-driven environments. Candidates must be able to obtain and maintain a TS/SCI clearance. Key Responsibilities Conduct static and dynamic malware analysis to determine functionality, intent, and impact Perform reverse engineering of binaries to uncover persistence mechanisms, exploit behavior, and obfuscation techniques Execute host-based and memory forensics on compromised systems Analyze artifacts such as registry changes, file system modifications, memory dumps, and logs Identify and document indicators of compromise (IOCs) and attack chains Correlate forensic findings with threat intelligence and adversary TTPs Develop scripts, tools, or automation to support malware and forensic analysis efforts Produce clear, detailed technical reports and brief findings to stakeholders Support incident response and post-exploitation analysis on classified networks Stay current with emerging malware families, forensic methodologies, and reverse engineering tools Required Qualifications Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical field (or equivalent experience) Hands-on experience in malware analysis, reverse engineering, and/or digital forensics Strong understanding of Windows and/or Linux internals Proficiency with reverse engineering and forensic tools such as: Ghidra, IDA Pro, Binary Ninja x64dbg, WinDbg, Volatility, Autopsy Experience with x86/x64 assembly and low-level debugging Proficiency in scripting or programming (Python, C/C++, or similar) Understanding of common malware techniques including packing, encryption, obfuscation, and anti-analysis methods Ability to obtain and maintain a TS/SCI clearance Preferred Qualifications Prior experience supporting DOD, Intelligence Community, or federal cyber programs Experience with memory forensics and live response Familiarity with network forensics and PCAP analysis Experience analyzing APT or nation-state malware Kernel-mode, firmware, or embedded system reverse engineering experience Active TS/SCI clearance Work Environment Work performed in a secure, classified environment Highly technical, mission-critical role supporting national security Collaboration with elite cyber, intelligence, and engineering teams #LAT