Cyber Forensics Analyst
Listed on 2026-10-15
-
IT/Tech
Cybersecurity, Information Security & Data Protection
- 12 years without BS/BA, 10 years with Associates, 8 years with BS/BA, 6 years with MA/MS
- GIAC Certified Forensic Analyst (GCFA) certification.
- Must possess an active, OR have the ability to obtain within 90 days of hire date, an ITIL Foundations Certification.
- Must have a full, complete, and in-depth understanding of all aspects of Defensive Cyber Operations.
- Active Top-Secret/SCI security clearance
Peraton is currently seeking a Cyber Forensics & Malware Analyst
The Cyber Forensics & Malware Analyst conducts highly technical, deep-dive investigations into cyber security incidents, digital media, and malicious software. This role is responsible for identifying, preserving, analyzing, and presenting digital evidence while reverse-engineering malicious code to determine its origin, capabilities, and impact on the enterprise network.
Conduct host-based and network-based forensic investigations to identify root cause and scope of compromise.
Collect, preserve, and analyze digital evidence from various sources including hard drives, volatile memory, and network logs.
Perform static and dynamic analysis of malicious binaries to identify indicators of compromise (IOCs), capabilities, and infrastructure.
Use debuggers, disassemblers, and virtualization tools to bypass packing and obfuscation techniques.
Document technical findings in comprehensive investigation reports for both technical and leadership audiences.
Assist in threat intelligence efforts by attributing activities to known threat actors or advanced persistent threats (APTs).
Assist in the development of signatures (YARA, Snort, etc.) and mitigation strategies based on analysis findings.
Collaborate with security operations and incident response teams to harden network defenses.
Lead development of training plan and mentor analysts to ensure forensics processes are followed from incident start to end.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).