> Markdown version of [/jobs/ext/2835841-media-malware-analyst](https://www.wearedevelopers.com/jobs/ext/2835841-media-malware-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Media Malware Analyst - **Company:** CareerCircle - **Location:** Odenton, MD, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** HTML, Microsoft Windows, Artificial Intelligence, Microsoft Azure, Bash Shell, Unix, C++ (Programming Language), Network Analysis, Cloud Computing Security, Apache Lucene, Cyber Security, Information Systems, Computer Networks, Data Visualization, Query Languages, Digital Forensics, Issue Tracking Systems, Systems Analysis, Intelligence Analysis, Internet Protocol, Intrusion Detection and Prevention, Network Packet, OSI Models, Information Systems Security Architecture Professional, Python (Programming Language), Knowledge Management, Linux Commands, Log Files, Machine Learning, NetFlow, Network Forensics, Network Protocols, NIPRNet, Open Source Intelligence, Windows PowerShell, Recommender Systems, Power BI, Reverse Engineering, Security Information and Event Management, Software Engineering, SQL Databases, TCP/IP, Wireshark, Software Vulnerability Management, Extensible Markup Language (XML), Network Routing, Network Routers, Scripting, Computer Network Operations, Mitre Att&ck, Malware, Cyber Threat Analysis, Firewalls (Computer Science), Tanium Platform Expertise, Information Technology, Cybercrime, Reverse Engineering Software, 3-tier Architectures, Cyber Warfare, Splunk, Visual Basic Language, Cisco, Programming Languages - **Published:** September 10, 2026 - **Apply:** https://www.careercircle.com/jobs/all/all/usa/dc/washington/aa6c7da4-f2df-43d8-86b6-5c4f00062083 ## About the Role * The candidate must currently possess a Top Secret/SCI Clearance. * BS in IT related field and 8-12 years' experience in an IT field, or MS in IT related field and 8+ years' experience in an IT Field, with a minimum of 7 years of experience as a Tier III senior cyber security analyst performing intelligence analysis, collection management, and technical analysis. * Two years of recent experience with host-based and network-based security monitoring solutions and to include security content recommendation or development (host based and network signatures). * Maintain and drive the development of new reports of Cyber Threat Intelligence analysis to peers, management and customer teams for purposes of situational awareness and making threat intelligence actionable. * Provide support to the Network Operations Security Center during incident response and threat hunting activities that include cyber threat analysis support, research, recommending relevant remediation and mitigation. * Conduct trending and correlation of various cyber intelligence sources for the purposes of indicator collection, shifts in TTPs, attribution and establish countermeasures to increase cyber resiliency. * Host-based and network-based forensics related to the identification of advanced cyber threat activities, intrusion detection, incident response, malware analysis, and security content development (e.g., signatures, rules etc.); and cyber threat intelligence. * Deep understanding of the cyber "Pyramid of Pain", Cyber Kill Chain, MITRE ATT&CK and the Diamond Model. Analysts should be able to conduct in-depth research into threat actors, tools, infrastructure, and TTPs using these frameworks. * Ability to correlate and enrich data from intelligence sources with internal logs, alerts, and incident data from Splunk and Analyst1 to drive threat hunting and detection initiatives. * Strong written and oral communication skills. Preferred Qualifications Must have at least one of the following certifications: * Must have one of the following certifications: CASP+ CE, CCNP-Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP Additionally preferred certifications held: * SANS GCTI * Previous DOD, IC or Law Enforcement Intelligence or Counterintelligence Training/Experience. * Knowledge of Structured Analytic Technique * Developing scripts to support cyber threat detection that outputs results in a variety of formats, such as VB scripts, Python, C++, HTML, XML or other types most appropriate for the task. * Proficient in one more of the following computer languages Python, Bash, Visual Basic or PowerShell to support cyber threat detection or reporting. * Working familiarity with additional tools such as CrowdStrike Falcon, Tanium, Proofpoint TAP, and Zscaler., Wireshark Operations Leadership Innovation Market Data Multitasking Data Science Communication Presentations Risk Analysis Cyber Warfare Cyber Security Prioritization Network Routing Formal Learning Ancient History Computer Science Machine Learning Threat Detection Malware Analysis Systems Analysis Operating Systems Critical Thinking Incident Response Digital Forensics Network Protocols Computer Networks Threat Assessment Technical Analysis Data Visualization Resource Allocation GIAC Certifications Software Engineering Top Secret Clearance Operational Planning Operational Reporting Artificial Intelligence Organizational Structure Research And Development Cyber Threat Intelligence GIAC Cyber Threat Intelligence GIAC Certified Forensics Analyst GIAC Reverse Engineering Malware Ghidra (Reverse Engineering Software) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) +0, Power BI Debating Equities Wireshark Operations Leadership Innovation Market Data Multitasking Data Science Communication Presentations Risk Analysis Cyber Warfare Cyber Security Prioritization Network Routing Formal Learning Computer Science Machine Learning Threat Detection Malware Analysis Systems Analysis Operating Systems Critical Thinking Incident Response Digital Forensics Network Protocols Computer Networks Threat Assessment Technical Analysis Data Visualization Resource Allocation GIAC Certifications Software Engineering Top Secret Clearance Operational Planning Operational Reporting Artificial Intelligence Organizational Structure Research And Development Cyber Threat Intelligence GIAC Cyber Threat Intelligence GIAC Certified Forensics Analyst GIAC Reverse Engineering Malware Ghidra (Reverse Engineering Software) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) +0 Google IT Automation with Python ## Description Falcon, Research Equities Operations Management Market Data Coordinating Cyber Security Issue Tracking Law Enforcement Ancient History Malware Analysis Support Services Incident Response Digital Forensics Windows PowerShell Policy Enforcement Computer Languages Content Development Operations Security GIAC Certifications Cyber Threat Hunting Intelligence Analysis Cyber Threat Analysis MITRE ATT&CK Framework Collections Management Bash (Scripting Language) Cyber Threat Intelligence C++ (Programming Language) Cyber Kill Chain Framework Verbal Communication Skills Python (Programming Language) GIAC Certified Incident Handler Extensible Markup Language (XML) HyperText Markup Language (HTML) Intrusion Detection And Prevention Visual Basic (Programming Language) Tanium (Endpoint Management Software) GIAC Certified Enterprise Defender (GCED) Certified Information System Auditor (CISA) CompTIA Advanced Security Practitioner (CASP+) CISCO Certified Network Professional - Security Certified Information Systems Security Professional Top Secret-Sensitive Compartmented Information (TS/SCI Clearance), Leidos is seeking a Tier 3 Cyber Threat Intelligence Analyst to join our team on a highly visible cyber security single-award IDIQ vehicle that provides Network Operations Security Operations (NOSC) support, cyber analysis, and application development. Department of Homeland Security (DHS), NOSC Support Services is a US Government program responsible to monitor, detect, analyze, mitigate, and respond to cyber threats and adversarial activity on the DHS Enterprise. DHS NOSC has primary responsibility for monitoring and responding to security events and incidents detected at the Trusted Internet Connection (TIC) and Policy Enforcement Point (PEP) and is responsible for directing and coordinating detection and response activities performed by each Component SOC. Direction and coordination are achieved through a shared DHS incident tracking system and other means of coordination and communication. The Cyber Threat Intel Analyst will need a strong cyber security background with experience with the following: Identify, track and investigate high priority threat campaigns, malicious actors with the interest, capability and TTPs (Techniques, Tactics and Procedures). Bring a comprehensive understanding, analyzing and tracking the cyber threat landscape, including identifying and analyzing cyber threats actors, APT TTPs and/or activities to enhance cybersecurity posture of the organization's IT operating environment., Google IT Automation with Python Cyber Intelligence Fusion Analyst Leidos Alexandria, VA*On-Site Unix Splunk TCP/IP Tooling NIPRNet NetFlow Research Firewall Equities Dashboard Scripting Telemetry Log Files Wireshark Operations Leadership Automation OSI Models Encryption Market Data Traffic Flow CSSP Analyst Investigation Collaboration Apache Lucene Cyber Security Linux Commands Cloud Security Network Packet Azure Sentinel Case Management Law Enforcement Query Languages Threat Modeling Ancient History Computer Science Defense In Depth Windows Defender Cyber Operations Malware Analysis Network Analysis Support Services Incident Response Digital Forensics Network Forensics Windows PowerShell Workflow Management GIAC Certifications Enterprise Security Knowledge Management Technical Leadership Top Secret Clearance Cyber Threat Hunting Cyber Investigations System Administration Information Technology MITRE ATT&CK Framework Vulnerability Management Certified Ethical Hacker Open Source Intelligence Cyber Threat Intelligence SQL (Programming Language) IAT Level II Certification Cyber Kill Chain Framework Subscription Business Models Python (Programming Language) Preparing Executive Summaries GIAC Cyber Threat Intelligence Endpoint Detection And Response GIAC Certified Incident Handler GIAC Certified Intrusion Analyst Intrusion Detection And Prevention CompTIA Cybersecurity Analyst (CySA+) GIAC Certified Enterprise Defender (GCED) CompTIA Advanced Security Practitioner (CASP+) Security Information And Event Management (SIEM) Secret Internet Protocol Router Network (SIPRNet) Certified Information Systems Security Professional Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) +0 Media Malware Analyst, Journeyman Leidos ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [The Resilience of the World Wide Web](https://www.wearedevelopers.com/videos/1281-the-resilience-of-the-world-wide-web) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)