Description
The Intelligence Sector at Leidos seeks a highly qualified and trained Journeyman-level Media Malware Analyst to support United States Cyber Command (USCYBERCOM) operations.
The successful candidate will identify and analyze sophisticated malware threats targeting USCYBERCOM, the Department of Defense Information Network (DODIN), and associated networks and organizations.
Key responsibilities:
- Provide timely, accurate, and relevant support in identifying and assessing emerging threats and vulnerabilities in the Cyberspace domain
- Conduct forensic analysis of vulnerable or compromised systems and media, and identify and analyze adversary tactics, techniques, and procedures (TTPs) and intrusion artifacts
- Perform static and dynamic malware analysis, including reverse engineering and extracting malicious files from digital media
- Create technical analysis reports with actionable intelligence findings and deliver timely, accurate, and relevant threat briefs and analysis updates
- Identify unique indicators for signature and heuristic development
- Draft and support implementation of security incident response policies
- Analyze operational reporting to correlate attack trends and shared tradecraft
- Conduct log/system analysis for threat detection and update DoD situational awareness mechanisms
- Research open-source intelligence to inform threat assessments and signature creation
- Develop and maintain validated MD5 hash lists for signature repositories
- Analyze and evaluate finished intelligence, single-source intelligence, and technical data to identify Cyber threat patterns and anomalies
- Conduct and publish in-depth risk assessments to evaluate and categorize the risk posture of detected cyber threats
- Collaborate with operational, technical, and intelligence elements across USCYBERCOM to enhance situational awareness and threat response capabilities
- Maintain a current understanding of advanced persistent threats (APTs), threat actor TTPs, and cyber threat trends affecting national security
- Execute on-demand crisis plans and provide situational awareness to various projects and teams
Requirements:
- Active Top Secret clearance with SCI eligibility and Polygraph required
- Five plus years' demonstrated proficiency in malware analysis, incident handling, and reverse engineering
- Working experience with tools such as IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments
- Intimate familiarity with network protocols, OS internals, and cyber threat analysis
- Broad knowledge of Blue-space Cyber capabilities and understanding of available Cyber infrastructure or platforms
- Ability to support timely, accurate, and relevant analytical production
- Demonstrated proficiency working in a fast-paced collaborative environment and meeting short deadlines
- Strong interpersonal, critical thinking, and communication skills
Desirable skills:
- BA/BS or Masters' Degree or higher within Cybersecurity, Information Security, or related fields
- Experience developing detection signatures and writing technical reports for leadership
- Deep understanding of USCYBERCOM organisational structure and mission
- Prior experience supporting Joint operations across multiple warfighting domains
- Demonstrated experience incorporating Artificial Intelligence and Machine Learning into operations
- Experience with Space-enabled CO
- Formal training within the field of Cyber Warfare and Joint Operations
- Familiarity with Data Science and its applicability to CO
- Familiarity with Microsoft Power BI data visualisation software