Malware Reverse Engineer

Who We’re Looking For (Position Overview):
We’re looking for a Malware Reverse Engineer to perform advanced malware analysis and reverse engineering to determine maliciousness, capabilities, complexity, and attribution-relevant indicators. This role supports mission needs including identifying C2 infrastructure, extracting IOCs, and producing defensible analysis outputs that can support investigative and legal processes.
The ideal candidate is a deeply technical reverse engineer who can work independently on hard problems, rapidly learn unfamiliar techniques, and communicate complex behavior and conclusions in plain language.

What Your Day-To-Day Looks Like (Position Responsibilities)::
• Malware Analysis & Reverse Engineering
• Conduct static and dynamic analysis of binaries and scripts; reverse engineer across architectures (x86/x64, ARM/ARM64, MIPS, others as needed).
• Analyze packed/obfuscated/encrypted code; build unpacking/decryption routines where required.
• Tooling & Tradecraft
• Use tools such as IDA Pro, Ghidra, Binary Ninja, WinDbg, x64dbg, and related debuggers/disassemblers.
• Detection Engineering Outputs
• Extract IOCs; develop YARA rules and behavioral signatures to support detection and mitigation.
• Identify persistence mechanisms, anti-analysis, and C2 protocols; assess multi-platform malware (Windows, Linux, macOS, mobile, embedded/IoT).
• Documentation, Briefing & Testimony Readiness
• Produce thorough documentation of findings and conclusions; communicate clearly to non-expert audiences.
• Successfully complete a mock examination and defend results in a practical courtroom exercise (Government-run).
• Operational Support
• Support taskings that may require extended/irregular hours and location-specific needs depending on operational investigative activity.

What You Need to Succeed (Minimum Requirements)::
• Citizenship & Clearance
• U.S. Citizenship required.
• Active TS clearance with SCI eligibility required.
• Reverse Engineering Expertise
• Demonstrated hands-on experience with advanced malware reverse engineering across architectures and platforms.
• Independence & Problem Solving
• Ability to work independently on complex problems without higher-tier escalation support; self-directed research and rapid learning.

Ideally, You Also Have (Preferred Qualifications)::
• Proficiency in Python/PowerShell/Bash; additional experience in C/C++, Go, or Rust.
• Familiarity with common malware families and threat actor TTPs; experience building detection content (YARA, behavioral signatures).