Senior-level Media Malware Analyst

The Intelligence Sector seeks a highly qualified and trained Senior-level Media Malware Analyst to support United States Cyber Command (USCYBERCOM) operations by identifying and analysing sophisticated malware threats.

Responsibilities:

• Provide timely, accurate, relevant support in identifying and assessing emerging threats and vulnerabilities in the Cyberspace domain.
• Lead forensic analysis of vulnerable or compromised systems and media, and identify and analyse adversary TTPs and intrusion artifacts.
• Create technical analysis reports with actionable intelligence findings, delivering timely, accurate, relevant threat briefs and analysis updates.
• Identify unique indicators for signature and heuristic development.
• Oversee drafting, release, and implementation of security incident response policies.
• Analyse operational reporting to correlate attack trends and shared tradecraft.
• Conduct log/system analysis for threat detection and update DoD situational awareness mechanisms.
• Research open-source intel to inform threat assessments and signature creation.
• Develop and maintain validated MD5 hash lists for signature repositories.
• Analyse and evaluate All-Source finished intelligence, single-source intelligence, and technical data from various sources.
• Conduct and publish in-depth risk assessments to evaluate and categorise the risk posture of detected cyber threats.
• Collaborate with operational, technical, and intelligence elements across USCYBERCOM.
• Maintain a current understanding of advanced persistent threats (APTs), threat actor tactics, techniques, and procedures (TTPs), and cyber threat trends.
• Maintain situational awareness of, and execute on demand, CO crisis plans.
• Provide situational awareness to a range of projects, Crisis Action Teams, and current operations activities.
• Execute resource allocation decisions aligned with organisation objectives.
• Apply knowledge of cyber threats and attack methods and techniques emanating from state and non-state adversaries.
• Review, approve, prioritise, and submit operational requirements for research, development, and/or acquisition of Cyber capabilities.
• Interpret and apply laws, regulations, policies, and guidance relevant to daily activities.
• Communicate complex information, concepts, or ideas in a confident and well-organised manner.

Requirements:

• Active Top Secret clearance with SCI eligibility and Polygraph required.
• BA/BS degree or higher within Computer Science, Cybersecurity, Software Engineering, Digital Forensics, or related field.
• Eight plus years' demonstrated proficiency in malware analysis (static/dynamic), incident handling, and reverse engineering.
• Working experience with tools such as IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments.
• Strong familiarity with network protocols, OS internals (Windows/Linux/UNIX), and cyber threat analysis.
• Broad knowledge of Blue-space Cyber capabilities.
• Ability to support timely, accurate, relevant analytical production.
• Demonstrated proficiency working in a fast-paced collaborative environment.
• Strong interpersonal, critical thinking, and communication skills.

Favourable if you have:

• Masters' Degree or higher within Cybersecurity, Information Security, or related fields.
• Experience developing detection signatures and writing technical reports for leadership.
• Deep understanding of USCYBERCOM organisational structure and mission.
• Prior experience supporting Joint operations across multiple warfighting domains.
• Demonstrated experience incorporating Artificial Intelligence and Machine Learning into operations.
• Experience with Space-enabled CO.
• Formal training within field of Cyber Warfare and Joint Operations.
• Familiar with art of Data Science and applicability to CO.
• Familiar with Microsoft Power BI data visualisation software.
• Desired Certifications: GIAC Reverse Engineering Malware (GREM); Certified Reverse Engineering Analyst (CREA); Certified Malware Analyst (CMA); Digital Forensics and Incident Response (DFIR); GIAC Certified Forensic Analyst (GCFA); GIAC Cyber Threat Intelligence (GCTI).