P

Parsons

Digital infrastructure and security solutions provider

Malware Analyst

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeMaryland, USA$88.4k - $154.7kIn-person

About the Job

Requirements

  • An active Secret clearance is required; Top Secret clearance with SCI eligibility is preferred.
  • A bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field is required; four years of hands-on digital-forensics, malware-analysis, or reverse-engineering experience may substitute for the degree.
  • Proven experience performing software reverse engineering using IDA Pro, Ghidra, or equivalent tools is required.
  • Hands-on digital-forensics, malware-analysis, and reverse-engineering experience appropriate to the assigned level is required: Malware Analyst 1 requires at least two years, Malware Analyst 2 at least five years, Malware Analyst 3 at least eight years, and Malware Analyst 4 at least 12 years.
  • Experience performing static and dynamic malware analysis and interpreting malicious binary behavior is required.
  • Ability to identify indicators of compromise, adversary behaviors, persistence mechanisms, lateral movement, command-and-control activity, privilege escalation, and credential abuse is required.
  • Experience maintaining chain-of-custody documentation and handling evidence in accordance with laboratory procedures and security requirements is required.
  • Ability to prepare accurate, complete, and professionally formatted Malware Analysis Reports is required.
  • Strong analytical, investigative, technical, documentation, and written communication skills are required.
  • Ability to work independently and collaborate effectively with investigators, cybersecurity personnel, technical reviewers, government representatives, and multidisciplinary teams is required.

Responsibilities

  • Perform static and dynamic analysis of malware and potentially malicious files.
  • Conduct software reverse engineering of malicious binaries to determine behavior, extract indicators of compromise, and identify potential attribution.
  • Develop or maintain scripts and analytical utilities for malware triage, artifact extraction, timeline development, and repetitive examination tasks.
  • Identify indicators of compromise, persistence mechanisms, lateral-movement activity, command-and-control activity, privilege escalation, credential abuse, and other adversary behaviors.
  • Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.
  • Maintain accurate chain-of-custody documentation and ensure evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
  • Prepare complete, technically accurate, and professionally formatted Malware Analysis Reports.
  • Validate malware-analysis tools, document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices, as assigned.
  • Participate in technical peer reviews of forensic reports and incorporate review comments.
  • Support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
  • Support quality-assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
  • Support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
  • Provide technical input to training, mentorship, process-improvement, and lessons-learned activities.

Desired Qualifications

  • At least one active certification, or an equivalent certification approved by the COR, such as GIAC Reverse Engineering Malware, EC-Council Certified Reverse Engineering Analyst, DC3 Cyber Training Academy Digital Forensic Examiner, GIAC Certified Forensic Analyst, or Computer Hacking Forensic Investigator.
  • Formal training dedicated to expert-witness testimony, rules of evidence, and courtroom procedure, such as DC3’s 40-hour Forensic Trial Training course, completed within the last three years when required for assigned duties.
  • Experience analyzing Windows, Linux, macOS, mobile, embedded, or cloud-based malware.
  • Experience using IDA Pro, Ghidra, Binary Ninja, debuggers, disassemblers, sandbox environments, or comparable reverse-engineering tools.
  • Experience developing scripts and analytical utilities for malware triage, artifact extraction, timeline development, or automated analysis.
  • Experience validating malware-analysis tools, verifying tool outputs, documenting validation results, and using version-control practices.
  • Experience supporting peer review, expert-witness preparation, affidavits, warrants, depositions, moot court sessions, or courtroom testimony.
  • Experience supporting quality-assurance programs, SOP implementation, accreditation activities, competency testing, audits, and laboratory metrics.
  • Experience with malware families, anti-analysis techniques, obfuscation, packing, persistence, command-and-control protocols, and attribution analysis.

About the Company

Parsons

Digital infrastructure and security solutions provider

Parsons provides digitally enabled solutions in national security, defense, and global infrastructure. Its work spans government and commercial clients, offering services in systems and software engineering, quality assurance, compliance, and security, along with large-scale infrastructure projects and advanced technology implementations. The company helps clients by delivering long-term, contract-based engagements that include AI readiness, data preparation for AI applications, and secure, reliable systems. A key differentiator is its breadth across diverse markets and its emphasis on rigorous systems engineering, QA, compliance, and security to ensure the integrity of critical operations while harnessing AI to improve efficiency and safety. Parsons’ goal is to solve complex security and infrastructure challenges through measurable, value-driven solutions and long-lasting partnerships with clients.

Company size
10,001+
Company stage
IPO
Headquarters
Chantilly, VA
Founded
1944

Recently Posted Jobs

Explore more opportunities at Parsons

See more jobs