Malware Analyst (Cybersecurity)

Location: Washington, D.C.; fully in-person schedule up to 5 days a week

Base salary: $88,920–$176,400 annually

Company

Security organization dedicated to protecting U.S. user data, applications, algorithms, and the content ecosystem through data privacy and cybersecurity programs.

What you will do

• Perform initial triage and basic static and dynamic analysis of suspicious files, scripts, and executables.
• Extract and validate indicators of compromise, including hashes, domains, IP addresses, URLs, registry changes, and persistence mechanisms.
• Support digital forensics and incident response investigations across endpoints, servers, mobile devices, data platforms, and cloud infrastructure.
• Investigate basic program logic, encoded content, and execution flows using disassemblers, debuggers, and script analysis tools.
• Research malware families, map behaviors to MITRE ATT&CK, and help develop and validate YARA and other detection content.
• Preserve evidence, document findings, maintain isolated analysis environments, and automate repetitive triage and enrichment tasks.

Requirements

• 2+ years of relevant experience in malware analysis, cybersecurity operations, digital forensics, or incident response; practical internships, coursework, projects, and lab experience may qualify.
• Foundational knowledge of Windows and Linux operating systems, processes, services, file systems, permissions, and persistence mechanisms.
• Basic understanding of TCP/IP, DNS, HTTP, and TLS networking concepts.
• Familiarity with static and dynamic analysis, file identification, hashing, strings extraction, behavioral monitoring, and safe malware handling.
• Ability to read and modify basic scripts in Python, PowerShell, Bash, or JavaScript and communicate technical findings clearly.
• Ability to work on-site in Washington, D.C., with an in-person schedule of up to five days per week.

Nice to have

• Experience with Ghidra, IDA Free, x64dbg, Process Monitor, Wireshark, or equivalent tools.
• Knowledge of Windows PE files, x86/x64 assembly, malicious scripts, phishing attachments, document-based threats, and obfuscated content.
• Experience creating YARA rules, using endpoint detection and response tools, analyzing memory or network traffic, and researching malware families.
• Experience with Git and scripting for analysis automation; relevant degree, training, or certifications such as Security+, GFACT, GCIH, or GREM.

Culture & Benefits

• Cross-functional collaboration with Security, Legal, HR, IT, and Engineering.
• Medical, dental, and vision insurance from day one.
• 401(k) savings plan with company match, paid parental leave, disability coverage, life insurance, and wellbeing benefits.
• 10 paid holidays, 10 paid sick days, and 17 days of paid personal time with increasing accruals by tenure.
• Inclusive workplace focused on creativity, curiosity, continuous learning, and meaningful impact.