> Markdown version of [/jobs/ext/4169122-cyber-forensics-analyst](https://www.wearedevelopers.com/jobs/ext/4169122-cyber-forensics-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Forensics Analyst

- **Company:** Peraton Inc
- **Location:** Sierra Vista, AZ, United States
- **Salary:** $80,000.0 - $128,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Computer Forensics, Software Debugging, Hard Disk Drives, Program Analysis, Reverse Engineering, Virtualization Technology, Snort (Software), Malware, Cyber Threat Analysis, Cyber Warfare
- **Published:** October 11, 2026
- **Apply:** https://diversityjobs.com/career/18621489/Cyber-Forensics-Analyst-Arizona-Fort-Huachuca

## About the Role

12 years without BS/BA, 10 years with Associates, 8 years with BS/BA, 6 years with MA/MS

 * GIAC Certified Forensic Analyst (GCFA) certification.
 * Must possess an active, OR have the ability to obtain within 90 days of hire date, an ITIL Foundations Certification.
 * Must have a full, complete, and in-depth understanding of all aspects of Defensive Cyber Operations.
 * Active Top-Secret/SCI security clearance

## Description

Peraton is currently seeking a Cyber Forensics & Malware Analyst

The Cyber Forensics & Malware Analyst conducts highly technical, deep-dive investigations into cyber security incidents, digital media, and malicious software. This role is responsible for identifying, preserving, analyzing, and presenting digital evidence while reverse-engineering malicious code to determine its origin, capabilities, and impact on the enterprise network.

Conduct host-based and network-based forensic investigations to identify root cause and scope of compromise.

Collect, preserve, and analyze digital evidence from various sources including hard drives, volatile memory, and network logs.

Perform static and dynamic analysis of malicious binaries to identify indicators of compromise (IOCs), capabilities, and infrastructure.

Use debuggers, disassemblers, and virtualization tools to bypass packing and obfuscation techniques.

Document technical findings in comprehensive investigation reports for both technical and leadership audiences.

Assist in threat intelligence efforts by attributing activities to known threat actors or advanced persistent threats (APTs).

Assist in the development of signatures (YARA, Snort, etc.) and mitigation strategies based on analysis findings.

Collaborate with security operations and incident response teams to harden network defenses.

Lead development of training plan and mentor analysts to ensure forensics processes are followed from incident start to end.