{"id":165065,"url":"https://alion.io/job/leidos-media-malware-analyst-journeyman","title":"Media Malware Analyst, Journeyman","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":237,"ghost_share":0.004,"stale_share":0.84,"repost_share":0.004,"time_to_fill_p50_days":27,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Meade, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":87100,"max":157450,"currency":"USD","period":"year","gross":null,"usd_annual":157450},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ghidra","optional":false},{"name":"IDA Pro","optional":false},{"name":"Linux","optional":false},{"name":"Machine Learning","optional":false},{"name":"Power BI","optional":false},{"name":"Unix","optional":false},{"name":"Volatility","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-08-10T00:00:00Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-22T02:56:46Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":73},"description":"Looking for an opportunity to make an impact?\nAt Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. The Leidos Intelligence Sector) combines technology-enabled services and mission software capabilities in the areas of cyber, logistics, security operations, and decision analytics to support our defense and intel customers’ mission to defend against evolving threats around the world.\nYour greatest work is ahead!\nThe Intelligence Sector seeks a highly qualified and trained Journeyman-level Media Malware Analysts to support United States Cyber Command (USCYBERCOM) operations by identifying and analyzing sophisticated malware threats targeting USCYBERCOM the Department of Defense Information Network (DODIN), and associated networks and organizations. This vital on-site support to USCYBERCOM J3 (Operations), Cyber National Mission Force (CNMF), and Joint Task Force-Ares (JTF-ARES) underpins USCYBERCOM support to United States National Security objectives.\nThis opportunity is in anticipation of a potential future contract award.\nWhat you’ll be doing:\nProvide timely, accurate, relevant support in manner that best supports USCYBERCOM in identifying and assessing emerging threats and vulnerabilities in the Cyberspace domain.\nConduct forensic analysis of vulnerable or compromised systems and media and identify and analyze adversary TTPs and intrusion artifacts.\nPerform static and dynamic malware analysis, including reverse engineering and extracting malicious files from digital media and conduct detailed file analysis, as appropriate. \nCreate technical analysis reports with actionable intelligence findings, delivering timely, accurate, relevant threat briefs and analysis updates that meet explicit and implied requirements, and deliver presentations to leadership in appropriate formats.\nIdentify unique indicators for signature and heuristic development.\nDraft and support implementation of security incident response policies.\nAnalyze operational reporting to correlate attack trends and shared tradecraft and support development and improvement of enterprise malware analysis tools. \nConduct log/system analysis (routers, Windows, UNIX) for threat detection and update DoD situational awareness mechanisms (e.g., USCYBERCOM portals).\nResearch open-source intel to inform threat assessments and signature creation.\nDevelop and maintain validated MD5 hash lists for signature repositories\nAnalyze and evaluate All-Source finished intelligence, single-source intelligence, and technical data from various sources to identify Cyber threat patterns and anomalies.\nConduct and publish in-depth risk assessments to evaluate and categorize the risk posture of detected cyber threats while supporting development and refinement of risk assessment methodologies and tools used for threat categorization.\nCollaborate with operational, technical, and intelligence elements across USCYBERCOM to enhance situational awareness and threat response capabilities.\nMaintain a current understanding of advanced persistent threats (APTs), threat actor tactics, techniques, and procedures (TTPs), and cyber threat trends affecting national security.\nMaintain situational awareness of, and execute on demand, CO crisis plans.\nProvide situational awareness to range of projects, Crisis Action Teams, and current operations activities supporting Operational Planning Teams (OPTs)\nExecute resource allocation decisions aligned with organization objectives.\nApply knowledge of cyber threats and attack methods and techniques emanating from state and non-state adversaries and tiered vulnerabilities within Blue Space as focus of threats.\nReview, approve, prioritize, and submit operational requirements for research, development, and/or acquisition of Cyber capabilities\nInterpret and apply laws, regulations, policies, and guidance relevant to daily activities \nCommunicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.\nWhat does Leidos need from me?\nActive Top Secret clearance with SCI eligibility and Polygraph required.\nBA/BS degree or higher within Computer Science, Cybersecurity, Software Engineering, Digital Forensics, or related field, or ability to complete degree within one year of hire. Can substitute formal education with extended experience and technical certifications.\nFive plus years’ demonstrated proficiency in malware analysis (static/dynamic), incident handling, and reverse engineering.\nWorking experience with tools such as IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments.\nIntimate familiarity with network protocols, OS internals (Windows/Linux/UNIX), and cyber threat analysis\nBroad knowledge of Blue-space Cyber capabilities and demonstrate understanding of available Cyber infrastructure or platforms to conduct Defensive (DCO) and Offensive Cyberspace Operations (OCO)\nKnowledge of computer networking fundamentals as well as concepts, terminology, and operations of a wide range of communications media (computer and telephone networks, satellite, fiber, wireless).\nAbility to support timely, accurate, relevant analytical production, to include documents, summaries, issue papers, talking points, and briefings.\nDemonstrated proficiency working in a fast-paced collaborative environment, ability to proactively multi-task and meet short deadlines.\nStrong interpersonal, critical thinking, and communication skills, including the ability to clearly convey complex and technical data to nontechnical consumers.\nFavorable if you have:\nMasters’ Degree or higher within Cybersecurity, Information Security, or related fields. \nExperience developing detection signatures and writing technical reports for leadership.\nDeep understanding of USCYBERCOM organizational structure and mission. \nPrior experience supporting Joint operations across multiple warfighting domains. \nDemonstrated experience incorporating Artificial Intelligence and Machine Learning into operations at any level to increase efficiency and effectiveness of operational outcomes\nExperience with Space-enabled CO. \nFormal training within field of Cyber Warfare and Joint Operations.\nFamiliar with art of Data Science and applicability to CO.\nFamiliar with Microsoft Power BI data visualization software. \nDesired Certifications (not all inclusive, no expectations for candidate to hold all certifications): GIAC Reverse Engineering Malware (GREM); Certified Reverse Engineering Analyst (CREA); Certified Malware Analyst (CMA); Digital Forensics and Incident Response (DFIR); GIAC Certified Forensic Analyst (GCFA); GIAC Cyber Threat Intelligence (GCTI).\nThis posting is for multiple opportunities ranging in years of experience. Level of opportunity including compensation, will be matched to the candidate's experience.\nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nSeptember 25, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\nPay Range:\nPay Range $87,100.00 - $157,450.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":8173,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","C4ISR","Defense Manufacturing","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-08-10T00:00:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.38,"p_room":0.28,"age_days":72,"expected_fill_days":27,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":157450,"is_top_pay":false},"html_url":"https://alion.io/job/leidos-media-malware-analyst-journeyman","json_url":"https://alion.io/job/leidos-media-malware-analyst-journeyman.json","meta":{"generated_at":"2026-10-22T03:26:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3226,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-media-malware-analyst-journeyman"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-media-malware-analyst-journeyman"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-media-malware-analyst-journeyman"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-media-malware-analyst-journeyman\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-media-malware-analyst-journeyman"}]}