Description
The Intelligence Sector at Leidos seeks a highly qualified and trained Journeyman-level Media Malware Analyst to support United States Cyber Command (USCYBERCOM) operations.
The successful candidate will provide timely, accurate, and relevant support in identifying and assessing emerging threats and vulnerabilities in the Cyberspace domain.
Key responsibilities include:
- Conducting forensic analysis of vulnerable or compromised systems and media
- Identifying and analysing adversary tactics, techniques, and procedures (TTPs) and intrusion artifacts
- Performing static and dynamic malware analysis, including reverse engineering and extracting malicious files from digital media
- Creating technical analysis reports with actionable intelligence findings
- Identifying unique indicators for signature and heuristic development
- Drafting and supporting implementation of security incident response policies
- Analysing operational reporting to correlate attack trends and shared tradecraft
- Conducting log/system analysis for threat detection and updating DoD situational awareness mechanisms
- Researching open-source intelligence to inform threat assessments and signature creation
- Developing and maintaining validated MD5 hash lists for signature repositories
- Analysing and evaluating finished intelligence, single-source intelligence, and technical data to identify Cyber threat patterns and anomalies
- Conducting in-depth risk assessments to evaluate and categorise the risk posture of detected cyber threats
- Collaborating with operational, technical, and intelligence elements across USCYBERCOM to enhance situational awareness and threat response capabilities
- Maintaining a current understanding of advanced persistent threats (APTs), threat actor TTPs, and cyber threat trends affecting national security
- Executing crisis plans and providing situational awareness to various projects and teams
- Applying knowledge of cyber threats and attack methods and techniques emanating from state and non-state adversaries
- Reviewing, approving, prioritising, and submitting operational requirements for research, development, and/or acquisition of Cyber capabilities
- Interpreting and applying laws, regulations, policies, and guidance relevant to daily activities
- Communicating complex information in a confident and well-organised manner
Requirements:
- Active Top Secret clearance with SCI eligibility and Polygraph required
- BA/BS degree or higher in Computer Science, Cybersecurity, Software Engineering, Digital Forensics, or related field
- Five plus years' demonstrated proficiency in malware analysis, incident handling, and reverse engineering
- Working experience with tools such as IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments
- Intimate familiarity with network protocols, OS internals, and cyber threat analysis
- Broad knowledge of Blue-space Cyber capabilities and understanding of available Cyber infrastructure or platforms
- Ability to support timely, accurate, and relevant analytical production
- Demonstrated proficiency working in a fast-paced collaborative environment
- Strong interpersonal, critical thinking, and communication skills
Favourable qualifications:
- Masters' Degree or higher in Cybersecurity, Information Security, or related fields
- Experience developing detection signatures and writing technical reports for leadership
- Deep understanding of USCYBERCOM organisational structure and mission
- Prior experience supporting Joint operations across multiple warfighting domains
- Demonstrated experience incorporating Artificial Intelligence and Machine Learning into operations
- Experience with Space-enabled CO
- Formal training within field of Cyber Warfare and Joint Operations
- Familiarity with art of Data Science and applicability to CO
- Familiarity with Microsoft Power BI data visualisation software
- Desired Certifications: GIAC Reverse Engineering Malware (GREM), Certified Reverse Engineering Analyst (CREA), Certified Malware Analyst (CMA), Digital Forensics and Incident Response (DFIR), GIAC Certified Forensic Analyst (GCFA), GIAC Cyber Threat Intelligence (GCTI)