1

Malware Research Jobs in Virginia (NOW HIRING)

The SEI is a federally funded research and development center at Carnegie Mellon University. What ... You enjoy working on emerging and complex malware analysis and reverse engineering problems. * You ...

next page

Showing results 1-20

Malware Research information

See Virginia salary details

$11

$43

$73

How much do malware research jobs pay per hour?

As of Aug 16, 2026, the average hourly pay for malware research in Virginia is $43.59, according to ZipRecruiter salary data. Most workers in this role earn between $27.12 and $57.28 per hour, depending on experience, location, and employer.

What is the difference between Malware Research vs Malware Analysis?

AspectMalware ResearchMalware Analysis
CredentialsCybersecurity certifications, programming skillsCybersecurity certifications, reverse engineering skills
Work EnvironmentResearch labs, cybersecurity firms, academiaSecurity operations centers, incident response teams
Industry UsageDeveloping detection methods, understanding malware evolutionIdentifying, dissecting, and mitigating malware threats
Search/Comparison IntentUnderstanding malware development and behaviorAnalyzing specific malware samples for threats

Malware Research focuses on studying malware to understand its development, behavior, and evolution, often in research labs or academic settings. Malware Analysis involves dissecting specific malware samples to identify threats and mitigate risks, typically within security operations or incident response teams. Both roles require cybersecurity expertise but differ in their primary objectives and work environments.

What are the key skills and qualifications needed to thrive as a malware researcher, and why are they important?

To thrive as a Malware Researcher, you need strong expertise in cybersecurity, reverse engineering, programming (such as C/C++ or Python), and a solid understanding of operating systems and malware behaviors, often supported by a degree in computer science or a related field. Familiarity with tools like IDA Pro, Ghidra, Wireshark, and sandbox environments, as well as certifications like CEH or OSCP, is highly valuable. Analytical thinking, attention to detail, and effective communication are critical soft skills for interpreting complex threats and collaborating with security teams. These skills are essential for identifying, analyzing, and mitigating malicious software to protect organizational assets and maintain cybersecurity.

What is malware research?

Malware research is the process of studying malicious software (malware) to understand how it operates, spreads, and affects computer systems. Researchers analyze malware samples using various techniques to identify their behavior, origins, and vulnerabilities. This information helps in developing effective detection, prevention, and removal strategies to protect individuals and organizations from cyber threats. Malware research also contributes to improving cybersecurity tools and informing law enforcement about emerging threats.

How much do malware researchers make?

Malware researchers typically earn between $70,000 and $120,000 annually, depending on experience, education, and location. Senior professionals with specialized skills in reverse engineering and threat analysis can earn higher salaries, especially in cybersecurity-focused environments.

What are some common challenges faced by professionals working in malware research?

Malware researchers often encounter the challenge of keeping pace with rapidly evolving threats and sophisticated attack techniques. The role requires continuous learning and adaptability, as new malware variants and evasion methods emerge frequently. Additionally, researchers must ensure their analysis environments are secure to prevent accidental infections or data breaches. Collaboration with other cybersecurity teams, such as incident response and threat intelligence, is also essential to sharing insights and developing effective countermeasures.

How do you become a malware researcher?

To become a malware researcher, typically a candidate needs a strong background in computer science, cybersecurity, or related fields, along with knowledge of programming languages like Python or C. Gaining experience with reverse engineering tools, malware analysis techniques, and earning certifications such as GREM or GREM can enhance prospects. Practical experience through internships or labs is also valuable for developing skills in analyzing malicious software.

What job categories do people searching Malware Research jobs in Virginia look for?

The top searched job categories for Malware Research jobs in Virginia are:

Infographic showing various Malware Research job openings in Virginia as of August 2026, with employment types broken down into 1% Internship, 1% As Needed, 87% Full Time, 9% Part Time, and 2% Contract. Highlights an 87% Physical, 4% Hybrid, and 9% Remote job distribution, with an average salary of $90,676 per year, or $43.6 per hour.

Hardware Reverse Engineer with Security Clearance

Quantum Science Solutions

Arlington, VA • On-site

$142K - $187K/yr

Other

Medical, Dental, Vision, Retirement, PTO

Re-posted 14 hours ago


Job description

Job Title: Hardware Reverse Engineer SME Location: Arlington, VA (On-Site) Clearance: Active TS/SCI Required Company: Quantum Science Solutions (QSS) Compensation: Open Rate Position Overview Quantum Science Solutions (QSS) is seeking a highly experienced Subject Matter Expert (SME) – Hardware Reverse Engineer to support mission-critical cyber incident response operations for Federal agencies and critical infrastructure organizations experiencing sophisticated cyberattacks. This role provides specialized expertise in hardware reverse engineering, embedded systems analysis, operational technology (OT), and industrial control systems (ICS) security to support forensic investigations, malware analysis, threat characterization, and remediation efforts. The selected candidate will focus on the analytical and investigative aspects of hardware forensics, supporting investigations where adversaries have embedded malicious capabilities within firmware, hardware components, network-edge devices, and critical infrastructure systems. Working alongside incident responders, researchers, engineers, and cybersecurity professionals, this individual will help identify exploitation methods, uncover hardware-based threats, and develop defensive strategies to protect critical systems and infrastructure. Key Responsibilities • Conduct comprehensive hardware reverse engineering of Operational Technology (OT) and Industrial Control System (ICS) devices. • Analyze compromised network-edge devices, embedded systems, and proprietary hardware targeted by advanced threat actors. • Perform reverse engineering, failure analysis, vulnerability analysis, and hardware research to identify exploitation risks and system weaknesses. • Identify, analyze, and extract deeply embedded malware from hardware and firmware components. • Reverse engineer firmware and low-level software operating on embedded devices and specialized hardware platforms. • Analyze proprietary communication protocols and embedded system functionality to understand adversary tactics and system vulnerabilities. • Identify hardware backdoors, implants, malicious modifications, and indicators of compromise. • Support forensic investigations in environments where traditional endpoint detection and response (EDR) visibility is unavailable or limited. • Collaborate with research teams to leverage advanced analytical capabilities and emerging hardware analysis techniques. • Utilize and enhance system emulation capabilities to support hardware analysis, malware research, and vulnerability assessments. • Develop and document hardware forensic methodologies, exploitation techniques, defensive countermeasures, and standard operating procedures. • Train cybersecurity analysts on hardware reverse engineering techniques, tools, and investigative methodologies. • Provide expert consultation on hardware security, embedded systems vulnerabilities, and edge device protection strategies. • Collaborate with electrical engineers and technical specialists on chip-off forensics and advanced hardware analysis activities. • Provide reach-back technical support to operational analysts during active cyber investigations and incident response operations. • Contribute to research initiatives focused on emerging hardware threats, embedded malware, and critical infrastructure security. • Prepare technical reports, intelligence products, and stakeholder briefings documenting investigative findings and recommended mitigations. Mandatory Skills • U.S. Citizenship • Active TS/SCI Clearance • Ability to obtain DHS Suitability • Minimum of 10+ years of experience in hardware reverse engineering, embedded systems analysis, or related disciplines. • Deep expertise with Operational Technology (OT) and Industrial Control Systems (ICS) hardware platforms and associated vulnerabilities. • Strong experience analyzing novel, proprietary, or undocumented hardware systems. • Extensive experience performing firmware reverse engineering and low-level software analysis. • Proficiency with reverse engineering tools including: IDA Pro, Ghidra, Binary Ninja • Deep understanding of embedded processor architectures including: ARM, MIPS, PowerPC, and other embedded processor families • Experience analyzing network-edge devices including routers, switches, firewalls, and IoT devices. • Knowledge of hardware debugging interfaces including: JTAG, SWD, and UART • Strong programming and scripting experience using: Python, C, and Assembly Language • Understanding of exploitation techniques targeting embedded systems and hardware platforms. • Experience conducting malware analysis within hardware and firmware environments. • Strong communication skills with the ability to explain complex technical findings to diverse audiences. • Experience working collaboratively within research-oriented and highly technical environments. • Excellent analytical, investigative, and problem-solving abilities. Preferred Skills • Experience supporting Federal cybersecurity, incident response, or critical infrastructure protection programs. • Experience performing advanced hardware exploitation activities in microelectronics exploitation laboratories. • Experience conducting: Inspection, imaging, decapsulation, deprocessing, and hardware exploitation analysis • Background in offensive security, penetration testing, or red team operations within OT environments. • Experience with: SCADA systems, PLCs, RTUs, and Industrial automation technologies • Knowledge of critical infrastructure technologies supporting energy, utilities, manufacturing, transportation, or related sectors. • Familiarity with supply chain security, hardware assurance, and implant detection methodologies. • Experience utilizing system emulation platforms and virtual hardware analysis environments. • Understanding of threat actor tactics, techniques, and procedures (TTPs) targeting OT systems and network-edge devices. • Background in hardware security research, electronics manufacturing, or embedded systems engineering. • Experience with chip decapsulation and invasive hardware analysis techniques. Education • Bachelor's degree in Electrical Engineering, Computer Science, Computer Engineering, or related field Desired Certifications • DoD 8140.01 IAT Level III • Project Management Professional (PMP) • GIAC Reverse Engineering Malware (GREM) • GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) • Other advanced hardware security, reverse engineering, embedded systems, or cybersecurity certifications Why QSS? At QSS, you'll help shape the future of cybersecurity operations by supporting mission-critical technology integration and modernization efforts that strengthen the nation's cyber defense capabilities. Benefits Include: • Competitive compensation with annual performance bonuses • Premium Medical, Dental, & Vision coverage • Generous PTO plus Federal Holidays • 401(k) with company match • Professional development and certification support