Lead Malware Forensic Analyst

R-00164716

Description

The Homeland and Force Protection Business Area has an immediate opening for a Lead Malware Forensic Analyst SME to support our customer’s mission critical malware analysis programs.  This position is an exciting opportunity to leverage your technical skills and support the nation’s defensive cyber operations supporting malware forensics, detection and defeat.  If you are looking to join and lead a team of the best cybersecurity professionals in the industry supporting our nation’s front line of defense against cyber threats, this is the job for you.

Primary Responsibilities

The Lead Malware Forensic Analyst SME will be responsible for the performance of the work and provide overall direction to Malware Forensic Analysis personnel working under this contract including:

• Conducting research around malicious software, vulnerabilities, and exploitation tactics.
• End-to-end processing of submissions, ingest and triage, ticket creation and prioritization, task assignments, progress tracking and reporting, established Standard Operation Procedures (SOPs) and guidance derived from Playbooks.
• Overseeing the production process to ensure products are high quality and published in a timely manner.
• Informing leadership when issues or anomalies arise, recommends corrective actions and provides updates and briefs to leadership as required.

Basic Qualifications

• Minimum of 10 years of specialized and senior experience with expertise in cybersecurity and cyber threat analysis and vectors including malware.
• Active TS/SCI clearance
• Experience with application security, network security, programming (assembly and web), obfuscation, and encryption techniques in addition to experience and innovation in developing tools and guidance on analysis techniques.
• Proven ability to effectively manage a technical analysis team in a dynamic mission environment, watch floor ops or joint mission operational application.
• Advanced ability of critical thinking, problem solving, and team coordination against multiple mission needs simultaneously.
• Experience with obfuscation & encryption techniques by APTs and other threat actors.
• Expertise in evaluation and analysis of complex malicious code and seamless integration of forensic analysis methodologies to understand the full scope of malicious activity.
• Advanced expertise in malware analysis through the utilization of tools and knowledge, including dissemblers, debuggers, hex editors, un-packers, virtual machines, network sniffers, as well as forensic tools such as Volitility, FTK Imager, log2timeline, Axiom.
• Bachelor’s Degree or equivalent expereince

Preferred Qualifications

• CISA or DHS cybersecurity experience as a technical SME
• Cybersecurity technical experience in the areas of Advanced Persistent Threat (APT) analysis, YARA rule crafting, or developing and maintaining a secure analysis environment

Come break things (in a good way). Then build them smarter.

We're the tech company everyone calls when things get weird. We don’t wear capes (they’re a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for “how it’s always been done.”

Original Posting: August 15, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range: Pay Range $126,100.00 - $227,950.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.