1

Windows Malware Reverse Engineer Jobs in Portland, OR

... malware or reverse-engineering requirements to senior analysts or the FMAT Lead. • Assist the SOC ... Windows servers as directed. • Support proactive malware analysis, incident response, and ...

New

Analyze Windows Registry, Windows System Calls, Linux artifacts, file system data, logs, and memory ... Escalate complex malware or reverse-engineering requirements to senior analysts or the FMAT Lead.

New

Reverse-engineer existing configurations, workflows, automations, and integrations to understand ... Windows and Linux environments - server administration, permissions management, service ...

... analysts, engineers, and other responders while maintaining disciplined investigative practices ... Windows, Linux, cloud, identity, email, endpoint, memory, malware, and network forensics. • ...

Coordinate basic information requests with system owners, security engineers, and other technical ... Stay current with common cyber threats, phishing techniques, malware trends, vulnerabilities, user ...

Bachelor's degree in Cybersecurity, Computer Science, IT, Computer Engineering, or other related ... malware analysis, and/or security operations. * Experience leading incident investigations ...

Windows Malware Reverse Engineer information

See Portland, OR salary details

$87K

$144.5K

$206.8K

How much do windows malware reverse engineer jobs pay per year?

As of May 30, 2026, the average yearly pay for windows malware reverse engineer in Portland, OR is $144,532.00, according to ZipRecruiter salary data. Most workers in this role earn between $94,400.00 and $188,800.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Windows Malware Reverse Engineer, and why are they important?

To thrive as a Windows Malware Reverse Engineer, you need strong knowledge of Windows internals, assembly programming, and malware analysis techniques, usually backed by a degree in computer science or cybersecurity. Proficiency with tools like IDA Pro, Ghidra, OllyDbg, and familiarity with common malware frameworks and relevant certifications such as GIAC Reverse Engineering Malware (GREM) are typically required. Attention to detail, analytical thinking, and strong problem-solving abilities are essential soft skills for unraveling complex threats. These competencies are crucial for identifying, understanding, and mitigating advanced malware threats that target Windows environments.

What are some common challenges faced by Windows Malware Reverse Engineers, and how can they be addressed?

Windows Malware Reverse Engineers often face challenges such as dealing with heavily obfuscated code, rapidly evolving malware techniques, and anti-analysis mechanisms designed to thwart reverse engineering efforts. These challenges require staying up-to-date with the latest tools, regularly practicing with new malware samples, and collaborating with peers to share insights. Building a strong foundation in Windows internals, assembly language, and using debuggers or disassemblers like IDA Pro or Ghidra can help overcome these obstacles and improve overall analysis efficiency.

What does a Windows Malware Reverse Engineer do?

A Windows Malware Reverse Engineer analyzes malicious software designed to target Windows operating systems. Their primary tasks include dissecting malware to understand how it works, identifying its behavior and purpose, and determining how it infects systems. They use specialized tools and techniques such as disassemblers, debuggers, and virtual environments to safely analyze and decode malware. The insights gained help develop detection methods, improve cybersecurity defenses, and assist in incident response.

What is the difference between Windows Malware Reverse Engineer vs Cybersecurity Analyst?

AspectWindows Malware Reverse EngineerCybersecurity Analyst
Required CredentialsKnowledge of reverse engineering, malware analysis, programming skills, certifications like GREM or GREMSecurity certifications like CISSP, CEH, or Security+; broader cybersecurity knowledge
Work EnvironmentSpecialized labs, malware analysis environments, often in security firms or R&D teamsSecurity operations centers, corporate IT teams, or government agencies
Industry UsagePrimarily in cybersecurity, malware research, threat intelligenceAcross industries for threat detection, incident response, and security policy enforcement

While both roles require cybersecurity knowledge, Windows Malware Reverse Engineers focus on dissecting malicious software to understand its mechanics, whereas Cybersecurity Analysts monitor and respond to security threats across organizations. The roles often overlap in skills but differ in daily tasks and focus areas.

What are popular job titles related to Windows Malware Reverse Engineer jobs in Portland, OR? For Windows Malware Reverse Engineer jobs in Portland, OR, the most frequently searched job titles are:
What job categories do people searching Windows Malware Reverse Engineer jobs in Portland, OR look for? The top searched job categories for Windows Malware Reverse Engineer jobs in Portland, OR are:
What cities near Portland, OR are hiring for Windows Malware Reverse Engineer jobs? Cities near Portland, OR with the most Windows Malware Reverse Engineer job openings:
Cyber Forensics Analyst

Cyber Forensics Analyst

ECS

Portland, OR • On-site

Full-time

Posted yesterday


Job description

Job Summary:
ECS is seeking a Cyber Forensics Analyst to work in our Portland, OR office. This role involves performing hands-on forensic analysis and malware investigation activities to support security investigations and incident response efforts using industry-standard forensic tools.
Responsibilities:
• Perform forensic analysis using industry-standard forensic tools and open-source DFIR utilities.
• Assist with forensic investigations involving endpoints, servers, malware, and cyber incidents.
• Analyze Windows Registry, Windows System Calls, Linux artifacts, file system data, logs, and memory artifacts.
• Create findings and technical notes that support investigative conclusions and remediation actions.
• Analyze malware in a lab environment using standard malware analysis techniques.
• Create IOCs based on forensic and malware findings for sharing with SOC and security teams.
• Support Java code de-obfuscation and technical analysis activities within the analyst skill level.
• Escalate complex malware or reverse-engineering requirements to senior analysts or the FMAT Lead.
• Assist the SOC with security investigations and incident response activities.
• Conduct routine memory checks on Linux and Windows servers as directed.
• Support proactive malware analysis, incident response, and advanced threat hunting activities.
• Communicate with different teams and data centers during investigations.
• Create clear investigation reports, forensic summaries, and supporting documentation.
• Communicate findings effectively to SOC analysts, incident responders, data center teams, and leadership.
• Apply strong investigative, research, and problem-solving skills to ambiguous technical issues.
• Contribute to repeatable forensic procedures, knowledge sharing, and continuous process improvement.
Qualifications:
Required:
• 5 to 8 years of experience in cybersecurity, digital forensics, incident response, or related cyber investigation work.
• Experience performing forensic analysis using industry-standard forensic tools and open-source tools.
• Familiarity with Windows Registry, Windows System Calls, Linux operating systems, and Java code de-obfuscation.
• Hands-on experience with Volatility or other memory forensics tools, FTK, and Wireshark.
• Ability to create IOCs based on forensic analysis and share them with other security teams.
• Ability to analyze malware in a lab environment using standard malware analysis techniques.
• Experience performing or supporting forensic investigations and incident response activities.
• Excellent written communication, resourcefulness, investigative ability, research skills, and problem-solving skills.
Preferred:
• Experience with EnCase (OpenText), Autopsy, Axiom, Zimmerman tools, and other DFIR tools.
• Experience supporting a U.S. Government civilian agency, enterprise SOC, or regulated environment.
• Experience with OllyDbg, IdaPro, or comparable reverse-engineering tools.
• Knowledge of X86 Intel Assembly Language.
• GCFE
• GCFA
• EnCE
• FOR508
• Security+
• GREM
• CEH
• CSFA
Company:
Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Founded in 2001, the company is headquartered in Fairfax, USA, with a team of 1001-5000 employees. The company is currently Late Stage.