Media Malware Analyst, Journeyman

Overview

This Journeyman‑level Media Malware Analyst role supports United States Cyber Command (USCYBERCOM) operations by identifying and analyzing sophisticated malware threats targeting the Department of Defense Information Network (DODIN) and associated networks.

• Provide timely, accurate support that best enables USCYBERCOM in identifying and assessing emerging threats and vulnerabilities in the cyberspace domain.
• Conduct forensic analysis of vulnerable or compromised systems and media and identify adversary TTPs and intrusion artifacts.
• Perform static and dynamic malware analysis, including reverse engineering and extracting malicious files from digital media, and conduct detailed file analysis as appropriate.
• Create technical analysis reports with actionable intelligence findings, delivering timely, accurate threat briefs and analysis updates that meet explicit and implied requirements, and deliver presentations to leadership in appropriate formats.
• Identify unique indicators for signature and heuristic development.
• Draft and support implementation of security incident response policies.
• Analyze operational reporting to correlate attack trends and shared tradecraft and support development and improvement of enterprise malware analysis tools.
• Conduct log/system analysis (routers, Windows, UNIX) for threat detection and update DoD situational awareness mechanisms (e.g., USCYBERCOM portals).
• Research open‑source intel to inform threat assessments and signature creation.
• Develop and maintain validated MD5 hash lists for signature repositories.
• Analyze and evaluate all‑source finished intelligence, single‑source intelligence, and technical data from various sources to identify cyber threat patterns and anomalies.
• Conduct and publish in‑depth risk assessments to evaluate and categorize the risk posture of detected cyber threats while supporting development and refinement of risk assessment methodologies and tools used for threat categorization.
• Collaborate with operational, technical, and intelligence elements across USCYBERCOM to enhance situational awareness and threat response capabilities.
• Maintain a current understanding of advanced persistent threats (APTs), threat actor tactics, techniques, and procedures (TTPs), and cyber threat trends affecting national security.
• Maintain situational awareness of, and execute on demand, CO crisis plans.
• Provide situational awareness to a range of projects, Crisis Action Teams, and current operations activities supporting Operational Planning Teams (OPTs).
• Execute resource allocation decisions aligned with organization objectives.
• Apply knowledge of cyber threats and attack methods and techniques emanating from state and non‑state adversaries and tiered vulnerabilities within Blue Space as focus of threats.
• Review, approve, prioritize, and submit operational requirements for research, development, and/or acquisition of cyber capabilities.
• Interpret and apply laws, regulations, policies, and guidance relevant to daily activities.
• Communicate complex information, concepts, or ideas in a confident and well‑organized manner through verbal, written, and/or visual means.

• Active Top Secret clearance with SCI eligibility and polygraph required.
• BA/BS degree or higher within Computer Science, Cybersecurity, Software Engineering, Digital Forensics, or related field, or ability to complete degree within one year of hire. Education may be substituted with extended experience and technical certifications.
• Five plus years of demonstrated proficiency in malware analysis (static/dynamic), incident handling, and reverse engineering.
• Working experience with tools such as IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments.
• Intimate familiarity with network protocols, OS internals (Windows/Linux/UNIX), and cyber threat analysis.
• Broad knowledge of Blue‑space Cyber capabilities and understanding of available cyber infrastructure or platforms to conduct defensive (DCO) and offensive cyberspace operations (OCO).
• Knowledge of computer networking fundamentals and concepts, terminology, and operations of various communications media (computer and telephone…