Cyber Investigations Engineer – Malware Analysis & Reverse Engineering

At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies – collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation’s health, security, and prosperity.

Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose — and help shape the future.

Department Summary:

The Digital Investigations Department focuses on transforming digital data into actionable understanding for investigative and law enforcement purposes. We combine technical analysis, investigative tradecraft, data analytics, and mission context to answer difficult questions, reconstruct events, identify malicious activity, reveal relationships, and support operational decision-making.

Our staff work across a range of digital investigation specialties, including digital evidence and forensics, open-source and digital intelligence, investigative analytics, adversary and activity analysis, operational investigations, and the development of new investigative capabilities and tradecraft.

Roles & Responsibilities :

In this role, the selected candidate will serve as an onsite technical liaison between MITRE and a federal law enforcement sponsor, providing hands-on expertise in malware analysis, reverse engineering, and cyber investigations. The candidate will work closely with sponsor personnel to understand operational challenges, deliver actionable technical insights, identify capability gaps, and connect sponsor needs with MITRE's broader technical expertise and research capabilities.

The selected candidate may contribute to efforts that:

Perform Malware Analysis and Reverse Engineering:
Conduct static and dynamic analysis of malicious software, including compiled binaries, scripts, and other executable artifacts, to understand functionality, identify malicious behaviors, extract indicators, and assess potential relationships to known malware families or campaigns.

Analyze Executables and Malicious Code:
Examine executable file formats, assembly instructions, memory structures, operating system interactions, obfuscation techniques, packing methods, and other low-level software characteristics to understand how malicious code operates and identify artifacts relevant to investigations.

Develop and Apply Malware Analysis Techniques:
Use debuggers, disassemblers, decompilers, sandboxes, and other specialized tools to investigate malware samples, overcome analysis challenges, and develop repeatable approaches for examining complex or unfamiliar malicious software.

Support Cyber and Law Enforcement Investigations:
Provide technical analysis in support of cybercrime and other investigative missions, including identifying relationships among malware samples, digital artifacts, network infrastructure, and adversary activity. Apply investigative awareness to produce findings that can support operational decisions and investigative leads.

Conduct Digital Forensic and Artifact Analysis:
Examine relevant host, network, memory, and file system artifacts to reconstruct malicious activity, understand execution and persistence mechanisms, and identify evidence or indicators that may support ongoing investigations.

Apply Deep Technical Knowledge of Computing…