Media Malware Analyst, Senior
Leidos · Fort Meade, MD · 3 wk ago
On-siteInformation Technology$108k–$195k/yrFull-time
We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. Remove boilerplate. Must preserve all substantive info.
We need to parse the description.
First, job title: Senior-level Media Malware Analysts (but we don't repeat as heading). Provide sections.
We need to extract:
- About the role: description of role, mission, context. The posting includes paragraphs about Leidos, Intelligence Sector, opportunity, etc. That's about the role.
- Responsibilities: bullet list of duties under "What You’ll Be Doing". Many bullet-like sentences. We'll need to convert each line into . The text includes many sentences separated by periods. We'll need to split into list items. Probably each sentence starting with a verb. We'll need to preserve all.
- Requirements: maybe "What does Leidos need from me?" includes clearance, degree, experience, tools, etc. That's requirements.
- Qualifications: maybe "Favorable If You Have" etc. Could be qualifications.
- Skills: maybe tools and abilities.
- Benefits: The posting includes "Pay and benefits are fundamental..." and mentions competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. Also "More details are available at www.leidos.com/careers/pay-benefits." That's benefits.
- Pay: explicit Pay Range $107,900.00 - $195,050.00.
- Schedule: Not mentioned. So we should not include Schedule section.
We must not include sections with placeholder or vague like "commensurate with experience". Not present.
We must not repeat job title as heading.
We must not include Job ID etc.
We must remove cookie/navigation/legal/EEO etc. The posting includes a lot of boilerplate at end: "Securing Your Data", "Commitment to Non-Discrimination". Those should be removed.
Also "About Leidos" section maybe considered boilerplate? It's about the company, not role. Might be considered not needed? The instruction: "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." "About Leidos" is not explicitly listed but could be considered boilerplate? It's generic company info. Might be considered not substantive to the role. However the instruction says preserve ALL substantive information; do NOT invent or summarize away detail. The "About Leidos" is generic but maybe considered not substantive to the role. However it's not explicitly prohibited. The instruction says "Prefer a few substantive sections over many thin ones." Including About Leidos might be thin. I'd consider omitting it to keep sections focused on role. But we need to decide.
The posting also includes "Original Posting September 21, 2026" and "For U.S. Positions: While subject to change..." that's metadata; we can fold into short p or drop. Probably drop.
We need to output only HTML fragment.
Let's craft sections:
.
Now Requirements: from "What does Leidos need from me?" Let's extract:
"Active Top Secret clearance with SCI eligibility and Polygraph required."
"BA/BS degree or higher within Computer Science, Cybersecurity, Software Engineering, Digital Forensics, or related field, or ability to complete degree within one year of hire. Can substitute formal education with extended experience and technical certifications."
"Eight plus years’ demonstrated proficiency in malware analysis (static/dynamic), incident handling, and reverse engineering."
"Working experience with tools such as IDA Pro, Ghidra, Wireshark, Volatility, and sandbox environments."
"Strong familiarity with network protocols, OS internals (Windows/Linux/UNIX), and cyber threat analysis"
"Broad knowledge of Blue-space Cyber capabilities and demonstrate understanding of available Cyber infrastructure or platforms to conduct Defensive (DCO) and Offensive Cyberspace Operations (OCO)"
"Knowledge of computer networking fundamentals as well as concepts, terminology, and operations of a wide range of communications media (computer and telephone networks, satellite, fiber, wireless)."
"Ability to support timely, accurate, relevant analytical production, to include documents, summaries, issue papers, talking points, and briefings."
"Demonstrated proficiency working in a fast-paced collaborative environment, ability to proactively multi-task and meet short deadlines."
"Strong interpersonal, critical thinking, and communication skills, including the ability to clearly convey complex and technical data to nontechnical consumers."
We'll put these as under Requirements.
Now Qualifications: "Favorable If You Have" list:
"Masters’ Degree or higher within Cybersecurity, Information Security, or related fields."
"Experience developing detection signatures and writing technical reports for leadership."
"Deep understanding of USCYBERCOM organizational structure and mission."
"Prior experience supporting Joint operations across multiple warfighting domains."
"Demonstrated experience incorporating Artificial Intelligence and Machine Learning into operations at any level to increase efficiency and effectiveness of operational outcomes"
"Experience with Space-enabled CO."
"Formal training within field of Cyber Warfare and Joint Operations."
"Familiar with art of Data Science and applicability to CO."
"Familiar with Microsoft Power BI data visualization software."
We'll put as under Qualifications.
Now Skills: maybe we can combine tools and abilities? But we already have tools in Requirements. Could create Skills section for technical skills like "Reverse engineering, static/dynamic malware analysis, incident handling, IDA Pro, Ghidra, Wireshark, Volatility, sandbox environments, network protocols, OS internals, cyber threat analysis, Blue-space Cyber capabilities, DCO/OCO, computer networking fundamentals, communications media, analytical production, fast-paced collaborative environment, interpersonal, critical thinking, communication." But that duplicates. Perhaps better to have Skills section for technical skills and soft skills separate? However we already have Requirements covering many. The instruction: "Use
About the role
... (summary of role description)
We need to preserve all substantive info from that part. Let's extract the role description paragraphs: "Looking for an opportunity to make an impact? At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. The Leidos Intelligence Sector combines technology-enabled services and mission software capabilities in the areas of cyber, logistics, security operations, and decision analytics to support our defense and intel customers’ mission to defend against evolving threats around the world. Your greatest work is ahead! The Intelligence Sector seeks a highly qualified and trained Senior-level Media Malware Analysts to support United States Cyber Command (USCYBERCOM) operations by identifying and analyzing sophisticated malware threats targeting USCYBERCOM the Department of Defense Information Network (DODIN), and associated networks and organizations. This vital on-site support to USCYBERCOM J3 (Operations), Cyber National Mission Force (CNMF), and Joint Task Force-Ares (JTF-ARES) underpins USCYBERCOM support to United States National Security objectives. This opportunity is in anticipation of a potential future contract award." We'll keep that as a paragraph. Now Responsibilities: list each bullet from "What You’ll Be Doing". Let's extract sentences: "Provide timely, accurate, relevant support in manner that best supports USCYBERCOM in identifying and assessing emerging threats and vulnerabilities in the Cyberspace domain." "Lead forensic analysis of vulnerable or compromised systems and media and identify and analyze adversary TTPs and intrusion artifacts, and lead static and dynamic malware analysis, including reverse engineering and extracting malicious files from digital media and conduct detailed file analysis, as appropriate." "Create technical analysis reports with actionable intelligence findings, delivering timely, accurate, relevant threat briefs and analysis updates that meet explicit and implied requirements, and deliver presentations to leadership in appropriate formats." "Identify unique indicators for signature and heuristic development." "Oversee drafting, release, and implementation of security incident response policies." "Analyze operational reporting to correlate attack trends and shared tradecraft and support development and improvement of enterprise malware analysis tools." "Conduct log/system analysis (routers, Windows, UNIX) for threat detection and update DoD situational awareness mechanisms (e.g., USCYBERCOM portals)." "Research open-source intel to inform threat assessments and signature creation." "Develop and maintain validated MD5 hash lists for signature repositories" "Analyze and evaluate All-Source finished intelligence, single-source intelligence, and technical data from various sources to identify Cyber threat patterns and anomalies." "Conduct and publish in-depth risk assessments to evaluate and categorize the risk posture of detected cyber threats while supporting development and refinement of risk assessment methodologies and tools used for threat categorization." "Collaborate with operational, technical, and intelligence elements across USCYBERCOM to enhance situational awareness and threat response capabilities." "Maintain a current understanding of advanced persistent threats (APTs), threat actor tactics, techniques, and procedures (TTPs), and cyber threat trends affecting national security." "Maintain situational awareness of, and execute on demand, CO crisis plans." "Provide situational awareness to range of projects, Crisis Action Teams, and current operations activities supporting Operational Planning Teams (OPTs)" "Execute resource allocation decisions aligned with organization objectives." "Apply knowledge of cyber threats and attack methods and techniques emanating from state and non-state adversaries and tiered vulnerabilities within Blue Space as focus of threats." "Review, approve, prioritize, and submit operational requirements for research, development, and/or acquisition of Cyber capabilities" "Interpret and apply laws, regulations, policies, and guidance relevant to daily activities" "Communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means." We'll put each as- for any list of duties/requirements/benefits". So we can have Requirements list, Qualifications list, Benefits list. Skills maybe not needed if covered. But we could still have Skills section for things like "Reverse engineering, static/dynamic malware analysis, incident handling, IDA Pro, Ghidra, Wireshark, Volatility, sandbox environments, network protocols, OS internals, cyber threat analysis, Blue-space Cyber capabilities, DCO/OCO, computer networking fundamentals, communications media, analytical production, fast-paced collaborative environment, interpersonal, critical thinking, communication." However that would duplicate content. Better to not create Skills if not explicitly listed. The posting does not have a separate "Skills" heading; it's embedded. So we may omit Skills section. Benefits: from "Pay and benefits are fundamental..." paragraph: "Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement." Also "More details are available at www.leidos.com/careers/pay-benefits." We'll put as
- list.
Pay: we have explicit Pay Range.
We'll create
Pay
Pay Range $107,900.00 - $195,050.00
maybe also note that it's a guideline. We should preserve the note: "The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law." We'll include that as part of the Pay section paragraph. Schedule: not present, omit. Now we need to ensure we don't include boilerplate like "About Leidos", "Securing Your Data", "Commitment to Non-Discrimination", "Original Posting September 21, 2026", "For U.S. Positions: While subject to change..." etc. We'll also need to remove duplicated lines. Now produce HTML. Let's craft:About the role
Looking for an opportunity to make an impact?