{"id":491123,"url":"https://alion.io/job/anavation-malware-reverse-engineer","title":"Malware Reverse Engineer","company":{"id":5038,"name":"AnaVation","domain":"anavationllc.com","url":"https://alion.io/company/anavation","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":78,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0.25,"time_to_fill_p50_days":55,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Annapolis Junction, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":94400,"max":217038,"currency":"USD","period":"year","gross":null,"usd_annual":217038},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Assembly","optional":false},{"name":"Binary Ninja","optional":false},{"name":"C++","optional":false},{"name":"Cuckoo Sandbox","optional":false},{"name":"Frida","optional":false},{"name":"Ghidra","optional":false},{"name":"IDA Pro","optional":false},{"name":"MISP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"STIX","optional":false},{"name":"TAXII","optional":false},{"name":"VirusTotal","optional":false},{"name":"Wireshark","optional":false},{"name":"DNS","optional":true},{"name":"Wi-Fi","optional":true}],"status":"live","first_seen_at":"2026-09-04T01:12:14Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-10-31T01:06:17Z","board_verified":true,"closed_at":null,"days_open":57,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":57},"description":"Description of Task to be Performed:\nAnaVation is looking for a talented Malware Reverse Engineer who is passionate about supporting National Security missions. The ideal candidate appreciates partnering with our customer and a group of cybersecurity experts to build environments and analyze the threat actor intent of malware in support of military intelligence missions. This position is full time on-site in Annapolis Junction, Maryland.\nPosition Responsibilities:\nPerform surface, dynamic, static, manual, and automated analysis on malicious software to determine its nature, capabilities, and potential impact. Analyze and reverse-engineer compiled executable code to understand its interactions with the environment and gain intelligence on its function and behavior. Evaluate malware attack capabilities, including transmission characteristics, attributes, and the intended purpose of the software, to understand its threat potential. Work closely with intelligence professionals to interpret the threat's intentions and capabilities and prepare detailed reports and studies on these findings. Additionally, provide technical expertise on the necessary hardware and software environments for effective malware triage and analysis.\nRequired Qualifications:\nClearance: U.S. Citizen, SCI within last 2 years.\nLocation: Full time on-site in Annapolis Junction, Maryland.\n Experience and knowledge:\nFour or more years of experience in a Reverse Engineering role\nFour years of experience with program languages such as C/C++ and Python. - Four years of experience with machine architecture, operating system internals, file system and memory management, and assembly language (x64, ARM, MIPS).\nProficient with static and dynamic reverse engineering techniques such as disassembly/decompilation, imports, strings, process monitoring, file system monitoring, network traffic capture, debugging, sandboxing, unpacking and deobfuscation.\nSkilled at analyzing compiled and interpreted programming languages.\nExperience with tools like IDA Pro, Ghidra, Hopper, Binary Ninja, Frida, PE Explorer, objdump, etc.\nFamiliar with dynamic tools used for monitoring malware behavior. Experience with tools like kernel and process debuggers, process explorer, Wireshark.\nFamiliarity with automated analysis systems (e.g. Cuckoo Sandbox) and open-source intelligence resources (e.g. VirusTotal) for initial triage and quick identification of well-known malware. \nAbility to write detailed technical reports on analysis findings and to present reports to stakeholders. Familiarity with MITRE ATT&CK framework, TTPs, IOCs, and CVEs to provide standard nomenclature.\nFamiliarity with threat sharing platforms (MISP) and threat intelligence interchange standards (STIX, TAXII).\nPreferred Qualifications:\nClearance: Polygraph within last 5 years\nEducation: Bachelor's degree or higher in Computer Science, Information Systems, or a related field.\n Certification: Certified Ethical Hacker (CEH),\nExperience and Knowledge: Six or more years of experience in a Reverse Engineering role.\n Malware sandbox analysis and forensics\nAbility to construct analysis sandboxes and to simulate necessary infrastructure to enable malware samples to execute (such as simulating Internet connectivity and DNS resolution).\nAbility to perform forensic analysis of sandbox environment to detect changes made by the malware sample during dynamic analysis. This includes detecting new, deleted, or modified files, changes to system settings, configurations, or registry entries, creation of new user accounts, open network ports, etc.\nAbility to use hex editors to modify malware samples in order to bypass anti-reversing logic. This includes logic that detects attached debuggers, virtual environments, excessive delays in process execution, etc.\nAbility to capture network and signals transmissions and to analyze the content of those transmissions. To include wired and wireless transmissions (Ethernet, Wi-Fi, Bluetooth, NFC, RF, etc.).\n Hardware reverse engineering.\nAbility to identify components and pathways attached to printed circuit boards (data and power).\nAbility to identify and map “pin-out” configurations of chips.\nAbility to connect to and monitor signals in and out of chips and convert those into binary data, ability to dump firmware images from hardware devices.\nAbility to identify hardware analysis requirements and tooling needs for hardware reversing.\nAbility to identify hardware anti-tamper mechanisms to prevent bricking or destruction of the device.","description_format":"text","description_chars":4537,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Intelligence","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-09-07T01:01:32Z"}],"visa":[],"liveness":{"score":45,"band":"ok","label":"Likely open","p_open":1,"p_active":0.815,"p_room":0.55,"age_days":56,"expected_fill_days":55,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":217038,"is_top_pay":true},"html_url":"https://alion.io/job/anavation-malware-reverse-engineer","json_url":"https://alion.io/job/anavation-malware-reverse-engineer.json","meta":{"generated_at":"2026-10-31T02:35:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3590,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5038},"rest":"https://alion.io/mcp/rest/get_company?id=5038"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fanavation-malware-reverse-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fanavation-malware-reverse-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fanavation-malware-reverse-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/anavation-malware-reverse-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fanavation-malware-reverse-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":491123}},{"tool":"search_jobs","arguments":{"company":"anavationllc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":491123},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}