Conduct detailed research and analysis of cyber threat actors, campaigns, infrastructure, malware, vulnerabilities, and tactics, techniques, and procedures using classified and unclassified ...
Conduct detailed research and analysis of cyber threat actors, campaigns, infrastructure, malware, vulnerabilities, and tactics, techniques, and procedures using classified and unclassified ...
Conduct detailed research and analysis of cyber threat actors, campaigns, infrastructure, malware, vulnerabilities, and tactics, techniques, and procedures using classified and unclassified ...
Conduct detailed research and analysis of cyber threat actors, campaigns, infrastructure, malware, vulnerabilities, and tactics, techniques, and procedures using classified and unclassified ...
Conduct detailed research and analysis of cyber threat actors, campaigns, infrastructure, malware, vulnerabilities, and tactics, techniques, and procedures using classified and unclassified ...
Conduct detailed research and analysis of cyber threat actors, campaigns, infrastructure, malware, vulnerabilities, and tactics, techniques, and procedures using classified and unclassified ...
Identify new malware distribution methods * Analyse information and develop methods of detection and removal of Malware * Remote troubleshooting and diagnostic analysis for malware infections
Identify new malware distribution methods * Analyse information and develop methods of detection and removal of Malware * Remote troubleshooting and diagnostic analysis for malware infections
Senior Security Researcher RSH Tickets Evening Shift 6pm to 3 am IST
Fountain, CO · On-site
$110 - $170/hr
Responsibilities Analysing new malware and phishing threats and author generic countermeasures and Botnet and Exploit Kit research to ensure coverage. Developing automation scripts to aid in research ...
New
Senior Security Researcher RSH Tickets Evening Shift 6pm to 3 am IST
Fountain, CO · On-site
$110 - $170/hr
Responsibilities Analysing new malware and phishing threats and author generic countermeasures and Botnet and Exploit Kit research to ensure coverage. Developing automation scripts to aid in research ...
New
Senior Research Engineer, Threat Intelligence
Colorado Springs, CO · On-site +1
$106K - $145K/yr
You'll take a research artifact (a malware finding, an infrastructure cluster, a new indicator class, a behavioral pattern) and turn it into something the company can use without a second round of ...
Senior Research Engineer, Threat Intelligence
Colorado Springs, CO · On-site +1
$106K - $145K/yr
You'll take a research artifact (a malware finding, an infrastructure cluster, a new indicator class, a behavioral pattern) and turn it into something the company can use without a second round of ...
As the operator of a federally funded research and development center (FFRDC), we are broadly ... Analyzing malware samples and attacker techniques to understand threat actor behavior and develop ...
As the operator of a federally funded research and development center (FFRDC), we are broadly ... Analyzing malware samples and attacker techniques to understand threat actor behavior and develop ...
As the operator of a federally funded research and development center (FFRDC), we are broadly ... Analyzing malware samples and attacker techniques to understand threat actor behavior and develop ...
As the operator of a federally funded research and development center (FFRDC), we are broadly ... Analyzing malware samples and attacker techniques to understand threat actor behavior and develop ...
As the operator of a federally funded research and development center (FFRDC), we are broadly ... Analyzing malware samples and attacker techniques to understand threat actor behavior and develop ...
As the operator of a federally funded research and development center (FFRDC), we are broadly ... Analyzing malware samples and attacker techniques to understand threat actor behavior and develop ...
Cyber Security Analyst
$75K - $126K/yr
Researching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clients * Identifying emerging ...
Cyber Security Analyst
$75K - $126K/yr
Researching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clients * Identifying emerging ...
Cyber Security Analyst with Security Clearance
Colorado Springs, CO · On-site
$75K - $126K/yr
Researching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clients * Identifying emerging ...
Cyber Security Analyst with Security Clearance
Colorado Springs, CO · On-site
$75K - $126K/yr
Researching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clients * Identifying emerging ...
Cyber Security Analyst
$75K - $126K/yr
Researching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clients * Identifying emerging ...
Cyber Security Analyst
$75K - $126K/yr
Researching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clients * Identifying emerging ...
Cyber Security Analyst
Colorado Springs, CO · On-site
$87K - $144K/yr
Researching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clients * Identifying emerging ...
Cyber Security Analyst
Colorado Springs, CO · On-site
$87K - $144K/yr
Researching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clients * Identifying emerging ...
SIMILAR CAREER TITLES Mobile Security Analyst, Reverse Engineer, Malware Analyst, Mobile Application Penetration Tester, Security Researcher, Software Reverse Engineer, Vulnerability Researcher ...
SIMILAR CAREER TITLES Mobile Security Analyst, Reverse Engineer, Malware Analyst, Mobile Application Penetration Tester, Security Researcher, Software Reverse Engineer, Vulnerability Researcher ...
... and Malware Analysis * Experience and ability to with analyzing information technology security ... An understanding in researching Emerging Threats and recommending monitoring content within ...
Quick apply
... and Malware Analysis * Experience and ability to with analyzing information technology security ... An understanding in researching Emerging Threats and recommending monitoring content within ...
Job Summary : Xcimer Energy leverages decades of research on Inertial Fusion Energy and is ... validation, malware scanning, and chain-of-custody documentation. • Partner with Network ...
Job Summary : Xcimer Energy leverages decades of research on Inertial Fusion Energy and is ... validation, malware scanning, and chain-of-custody documentation. • Partner with Network ...
Security Operation Center (SOC) Analyst II
Colorado Springs, CO · On-site
$60.29/hr
... and Malware Analysis * Experience and ability to with analyzing information technology security ... An understanding in researching Emerging Threats and recommending monitoring content within ...
Security Operation Center (SOC) Analyst II
Colorado Springs, CO · On-site
$60.29/hr
... and Malware Analysis * Experience and ability to with analyzing information technology security ... An understanding in researching Emerging Threats and recommending monitoring content within ...
Xcimer Energy leverages decades of research on Inertial Fusion Energy (IFE) combined with ... validation, malware scanning, and chain-of-custody documentation. * Partner with Network ...
Xcimer Energy leverages decades of research on Inertial Fusion Energy (IFE) combined with ... validation, malware scanning, and chain-of-custody documentation. * Partner with Network ...
... and Malware Analysis * Experience and ability to with analyzing information technology security ... An understanding in researching Emerging Threats and recommending monitoring content within ...
Quick apply
... and Malware Analysis * Experience and ability to with analyzing information technology security ... An understanding in researching Emerging Threats and recommending monitoring content within ...
Xcimer Energy leverages decades of research on Inertial Fusion Energy (IFE) combined with ... malware scanning, and chainofcustody documentation. * Partner with Network Architecture to design ...
Xcimer Energy leverages decades of research on Inertial Fusion Energy (IFE) combined with ... malware scanning, and chainofcustody documentation. * Partner with Network Architecture to design ...
Malware Researcher information
See Colorado salary details
$31.5K - $44.4K
4% of jobs
$44.4K - $57.3K
3% of jobs
$57.3K - $70.1K
18% of jobs
$70.5K is the 25th percentile. Wages below this are outliers.
$70.1K - $83K
9% of jobs
$83K - $95.8K
8% of jobs
$95.8K - $108.7K
3% of jobs
$108.7K - $121.5K
3% of jobs
The median wage is $126.4K / yr.
$121.5K - $134.4K
4% of jobs
$134.4K - $147.3K
3% of jobs
$147.3K - $160.1K
3% of jobs
$165.2K is the 75th percentile. Wages above this are outliers.
$160.1K - $173K
41% of jobs
$31.5K
$118.9K
$173K
How much do malware researcher jobs pay per year?
What is a malware researcher?
A Malware Researcher is a cybersecurity expert who analyzes malicious software to understand its behavior, origin, and impact. They reverse-engineer malware, develop detection methods, and create defenses to protect systems from cyber threats. Their work involves using specialized tools, programming, and forensic techniques to uncover vulnerabilities and patterns used by attackers. Malware Researchers often collaborate with cybersecurity teams, law enforcement, and organizations to mitigate threats and improve security measures.
What are the key skills and qualifications needed to thrive as a malware researcher?
To thrive as a Malware Researcher, you need strong expertise in computer science, reverse engineering, programming (such as C/C++ or Python), and a deep understanding of operating systems and network protocols. Proficiency with tools like IDA Pro, Ghidra, Wireshark, virtualization platforms, and malware analysis sandboxes, plus certifications like GREM or OSCP, is highly valued. Analytical thinking, problem-solving abilities, attention to detail, and effective communication are crucial soft skills for success in this role. These skills ensure accurate malware identification, effective threat analysis, and clear communication of findings to technical and non-technical stakeholders, all critical for maintaining cybersecurity.
What does a malware researcher do?
A typical day for a Malware Researcher involves analyzing suspected malicious files or code samples, documenting findings, and collaborating with cybersecurity teams to develop detection and mitigation strategies. You'll often use specialized tools to perform static and dynamic analysis, write detection rules, and stay updated on the latest threat trends. The role frequently requires responding quickly to new threats and participating in team meetings to discuss ongoing investigations. Expect a mix of independent research and close teamwork, as well as ongoing learning in a fast-paced, high-stakes environment.

Full-time
Medical, Life, Retirement, PTO
Posted 19 days ago
Booz Allen Hamilton rating
8.9
Based on 49 frontline employees who took The Breakroom Quiz
9th of 72 rated business consultants
Job description
The Opportunity:
Support cyber threat intelligence and adversary analysis activities to identify, assess, and communicate threats to client systems, networks, missions, and operations. Conduct detailed research and analysis of cyber threat actors, campaigns, infrastructure, malware, vulnerabilities, and tactics, techniques, and procedures using classified and unclassified intelligence sources. Collect, evaluate, correlate, and synthesize technical and intelligence reporting to develop actionable threat assessments, indicators of compromise, and intelligence products. Apply structured analytic techniques and intelligence tradecraft to assess threat actor intent, capability, opportunity, targeting, and potential mission impact. Maintain strict attention to detail when evaluating source reliability, confidence levels, attribution indicators, technical artifacts, and reporting consistency. Use managed attribution and operational security tools to conduct authorized research while protecting analyst identity, organizational attribution, and sensitive collection activities. Support threat research involving language sources, and language reporting, forums, technical publications, and open-source material. Collaborate with penetration testers, red teams, security operations teams, incident responders, vulnerability analysts, intelligence professionals, and mission stakeholders to translate threat intelligence into assessment objectives, defensive priorities, adversary emulation scenarios, and risk-informed recommendations. Contribute to written intelligence products, technical reports, briefings, presentations, and client deliverables while independently managing assigned research and analysis tasks.
You Have:
- 2+ years of experience in cyber threat intelligence, all-source intelligence, cyber operations, intelligence analysis, incident response, security operations, or a cybersecurity field
- Experience researching cyber threats, malware, vulnerabilities, threat actors, and adversary tactics, techniques, and procedures (TTPs), and producing intelligence assessments, threat reports, or operational briefings
- Experience analyzing technical cyber information, including indicators of compromise, malware, infrastructure, network activity, vulnerabilities, and attacker methodologies, while applying analytic frameworks such as MITRE ATT&CK, the Cyber Kill Chain, or the Diamond Model
- Experience evaluating intelligence reporting through source validation, analytic confidence, attribution assessment, and identification of intelligence gaps while producing accurate, well-organized, and defensible analytic products
- Experience communicating technical and intelligence findings to technical, operational, and executive audiences and collaborating effectively across multidisciplinary cyber, intelligence, engineering, and mission teams
- Ability to conduct independent research, manage competing priorities, maintain operational security, and perform effectively in dynamic, fast-paced environments
- Secret clearance
- Bachelor's degree in a Cybersecurity, Intelligence Studies, Computer Science, Information Technology, Engineering, International Relations, Political Science, or Regional Studies field and 2+ years of experience in cybersecurity or threat intelligence, or 6+ years of experience in cybersecurity or threat intelligence in lieu of a degree
- DoD 8140 cybersecurity certification, including Security+ certification
Nice If You Have:
- Experience using managed attribution, isolated browsing, secure research environments, or operational security platforms to conduct cyber-focused research and intelligence collection
- Experience supporting penetration testing, red team operations, adversary emulation, vulnerability assessments, incident response, threat hunting, or security operations center activities
- Experience identifying relationships among threat actors, malware families, infrastructure, campaigns, targeting patterns, and geopolitical events to support intelligence production and threat assessments
- Experience with Intelligence Community analytic standards, classification guidance, sourcing requirements, dissemination controls, and intelligence handling procedures
- Experience with scripting or automation using Python, PowerShell, or similar languages to support cyber research, intelligence analysis, or data processing
- Experience with commercial or government cyber threat intelligence platforms such as MISP, OpenCTI, ThreatConnect, Anomali, Recorded Future, or similar technologies
- Experience supporting DoD, Intelligence Community, or other federal cyber missions
- GCTI, GCIH, GCFA, GCIA, CySA+, CEH, Network+, CISSP, or comparable cyber or intelligence certifications
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
What Booz Allen Hamilton employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About Booz Allen Hamilton
Sourced by ZipRecruiter
Booz Allen Hamilton is a leading provider of management and technology consulting services to the US government in defense, intelligence, and civil markets. Headquartered in McLean, Virginia, the firm also serves major corporations, institutions, and not-for-profit organizations. Founded in 1914 by Edwin G. Booz, the company has a long-standing tradition of helping clients achieve success by delivering a wide range of consulting services that include strategic planning, human capital and learning, communication, systems development, and others. The company's mission is to empower people to change the world, and it has a reputation for maintaining the highest standards of integrity and-excellence.
Industry
It services
Company size
10,000+ Employees
Headquarters location
McLean, VA, US
Year founded
1914