Malware Developer Jobs in Virginia (NOW HIRING)

Job Title: Hardware Reverse Engineer SME Location: Arlington, VA (On-Site) Clearance: Active TS/SCI Required Company: Quantum Science Solutions (QSS) Compensation: Open Rate Position Overview Quantum Science Solutions (QSS) is seeking a highly experienced Subject Matter Expert (SME) – Hardware Reverse Engineer to support mission-critical cyber incident response operations for Federal agencies and critical infrastructure organizations experiencing sophisticated cyberattacks. This role provides specialized expertise in hardware reverse engineering, embedded systems analysis, operational technology (OT), and industrial control systems (ICS) security to support forensic investigations, malware analysis, threat characterization, and remediation efforts. The selected candidate will focus on the analytical and investigative aspects of hardware forensics, supporting investigations where adversaries have embedded malicious capabilities within firmware, hardware components, network-edge devices, and critical infrastructure systems. Working alongside incident responders, researchers, engineers, and cybersecurity professionals, this individual will help identify exploitation methods, uncover hardware-based threats, and develop defensive strategies to protect critical systems and infrastructure. Key Responsibilities • Conduct comprehensive hardware reverse engineering of Operational Technology (OT) and Industrial Control System (ICS) devices. • Analyze compromised network-edge devices, embedded systems, and proprietary hardware targeted by advanced threat actors. • Perform reverse engineering, failure analysis, vulnerability analysis, and hardware research to identify exploitation risks and system weaknesses. • Identify, analyze, and extract deeply embedded malware from hardware and firmware components. • Reverse engineer firmware and low-level software operating on embedded devices and specialized hardware platforms. • Analyze proprietary communication protocols and embedded system functionality to understand adversary tactics and system vulnerabilities. • Identify hardware backdoors, implants, malicious modifications, and indicators of compromise. • Support forensic investigations in environments where traditional endpoint detection and response (EDR) visibility is unavailable or limited. • Collaborate with research teams to leverage advanced analytical capabilities and emerging hardware analysis techniques. • Utilize and enhance system emulation capabilities to support hardware analysis, malware research, and vulnerability assessments. • Develop and document hardware forensic methodologies, exploitation techniques, defensive countermeasures, and standard operating procedures. • Train cybersecurity analysts on hardware reverse engineering techniques, tools, and investigative methodologies. • Provide expert consultation on hardware security, embedded systems vulnerabilities, and edge device protection strategies. • Collaborate with electrical engineers and technical specialists on chip-off forensics and advanced hardware analysis activities. • Provide reach-back technical support to operational analysts during active cyber investigations and incident response operations. • Contribute to research initiatives focused on emerging hardware threats, embedded malware, and critical infrastructure security. • Prepare technical reports, intelligence products, and stakeholder briefings documenting investigative findings and recommended mitigations. Mandatory Skills • U.S. Citizenship • Active TS/SCI Clearance • Ability to obtain DHS Suitability • Minimum of 10+ years of experience in hardware reverse engineering, embedded systems analysis, or related disciplines. • Deep expertise with Operational Technology (OT) and Industrial Control Systems (ICS) hardware platforms and associated vulnerabilities. • Strong experience analyzing novel, proprietary, or undocumented hardware systems. • Extensive experience performing firmware reverse engineering and low-level software analysis. • Proficiency with reverse engineering tools including: IDA Pro, Ghidra, Binary Ninja • Deep understanding of embedded processor architectures including: ARM, MIPS, PowerPC, and other embedded processor families • Experience analyzing network-edge devices including routers, switches, firewalls, and IoT devices. • Knowledge of hardware debugging interfaces including: JTAG, SWD, and UART • Strong programming and scripting experience using: Python, C, and Assembly Language • Understanding of exploitation techniques targeting embedded systems and hardware platforms. • Experience conducting malware analysis within hardware and firmware environments. • Strong communication skills with the ability to explain complex technical findings to diverse audiences. • Experience working collaboratively within research-oriented and highly technical environments. • Excellent analytical, investigative, and problem-solving abilities. Preferred Skills • Experience supporting Federal cybersecurity, incident response, or critical infrastructure protection programs. • Experience performing advanced hardware exploitation activities in microelectronics exploitation laboratories. • Experience conducting: Inspection, imaging, decapsulation, deprocessing, and hardware exploitation analysis • Background in offensive security, penetration testing, or red team operations within OT environments. • Experience with: SCADA systems, PLCs, RTUs, and Industrial automation technologies • Knowledge of critical infrastructure technologies supporting energy, utilities, manufacturing, transportation, or related sectors. • Familiarity with supply chain security, hardware assurance, and implant detection methodologies. • Experience utilizing system emulation platforms and virtual hardware analysis environments. • Understanding of threat actor tactics, techniques, and procedures (TTPs) targeting OT systems and network-edge devices. • Background in hardware security research, electronics manufacturing, or embedded systems engineering. • Experience with chip decapsulation and invasive hardware analysis techniques. Education • Bachelor's degree in Electrical Engineering, Computer Science, Computer Engineering, or related field Desired Certifications • DoD 8140.01 IAT Level III • Project Management Professional (PMP) • GIAC Reverse Engineering Malware (GREM) • GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) • Other advanced hardware security, reverse engineering, embedded systems, or cybersecurity certifications Why QSS? At QSS, you'll help shape the future of cybersecurity operations by supporting mission-critical technology integration and modernization efforts that strengthen the nation's cyber defense capabilities. Benefits Include: • Competitive compensation with annual performance bonuses • Premium Medical, Dental, & Vision coverage • Generous PTO plus Federal Holidays • 401(k) with company match • Professional development and certification support