Senior Malware Analyst (Media, Malware, and Analysis – MMA) MD TS/SCI CI POLY

The Senior Malware Analyst provides advanced technical expertise in malware analysis, digital forensics, and cyber threat intelligence in support of USCYBERCOM cyberspace operations. This role directly supports operations across USCYBERCOM J3, Cyber National Mission Force (CNMF), and Joint Task Force-Ares (JTF-ARES), delivering critical insights into adversary tactics, techniques, and procedures (TTPs) targeting the Department of Defense Information Network (DODIN) and associated mission systems.

The analyst performs deep technical analysis of malicious code, compromised systems, and digital media to identify threats, develop mitigation strategies, and enhance operational situational awareness. This position contributes to mission assurance, defensive cyberspace operations (DCO), and offensive cyberspace operations (OCO) by enabling timely, actionable intelligence and supporting enterprise cyber defense and exploitation capabilities.

• Active Top Secret clearance with SCI eligibility (Polygraph required).
• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, or related field (or equivalent experience).
• 8+ years of experience in malware analysis, reverse engineering, and incident response.
• Proficiency with tools such as IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments.
• Strong knowledge of network protocols, operating systems internals, and cyber threat analysis methodologies.
• Demonstrated ability to produce high-quality analytical products (reports, briefings, technical documentation) under tight timelines.

• Master’s degree in Cybersecurity, Information Security, or related discipline.
• Experience supporting USCYBERCOM, Joint operations, or DoD cyber missions.
• Certifications such as GREM, GCFA, GCTI, CREA, CMA, or DFIR-related credentials.
• Experience integrating AI/ML or data science techniques into cyber analysis workflows.

• →Conduct static and dynamic malware analysis, reverse engineering, and forensic examination of compromised systems and digital media to identify adversary TTPs and intrusion artifacts.
• →Perform media exploitation and forensic analysis, including extraction and analysis of malicious files, logs, and system artifacts across Windows, UNIX/Linux, and network environments.
• →Develop and disseminate technical intelligence reports, threat briefs, and executive summaries to support operational decision-making and leadership awareness.
• →Identify and develop indicators of compromise (IOCs), signatures, heuristics, and MD5 hash repositories to support detection and mitigation strategies.
• →Analyze and correlate cyber threat intelligence (all-source, SIGINT, and technical data) to identify patterns, anomalies, and emerging threats.
• →Support incident response activities, including policy development, after-action analysis, and improvement of response procedures.
• →Conduct trend analysis and risk assessments to evaluate threat posture and inform defensive and offensive cyberspace operations.
• →Collaborate with operational, intelligence, and technical teams across USCYBERCOM to enhance situational awareness and coordinated cyber response.
• →Support development and enhancement of enterprise malware analysis platforms and tools and contribute to DoD cyber situational awareness systems.
• →Provide subject matter expertise to Operational Planning Teams (OPTs), crisis action teams, and ongoing operations, including support to contingency and mission planning.