Vulnerability & Malware Researcher (Reverse Engineer)

Partner Forces is a management consulting firm helping homeland security organizations solve some of their most pressing and complex challenges. We partner with government agencies and industry to strengthen national security and critical infrastructure through expertise in strategy, program management, stakeholder engagement, technology implementation, preparedness, and business transformation.

At Partner Forces, we're more than consultants—we're trusted advisors. We work alongside our clients to solve meaningful problems, deliver actionable solutions, and make a lasting impact. As a growing firm, every employee has the opportunity to contribute not only to our clients' success, but also to the future of Partner Forces. We believe great consultants are developed through collaboration, mentorship, continuous learning, and meaningful opportunities to lead.

Our culture is grounded in six core values: Integrity, Excellence, Positivity, Candor, Determination, and Teamwork. These values shape how we work with our clients, support one another, and grow together. We believe that when our people thrive, our clients do too, which is why we invest in our employees' well-being, professional development, and long-term success.

What we are looking for:

Partner Forces is seeking a highly technical and curious Vulnerability & Malware Researcher (Reverse Engineer) to support critical cybersecurity initiatives for a federal client. In this role, you’ll dig into complex software, malware, and vulnerabilities to understand how they work, how adversaries may exploit them, and how cybersecurity teams can better detect and defend against emerging threats. We’re looking for someone who enjoys solving difficult technical problems, getting deep into code, and translating research into actionable security insights.

What you'll do:

• Perform static and dynamic analysis of malware to understand functionality, persistence mechanisms, command-and-control activity, and attacker objectives.
• Reverse engineer software and firmware to identify malicious behavior, vulnerabilities, and potential exploit paths.
• Research software, operating system, application, and firmware vulnerabilities and assess potential security impacts.
• Investigate adversary tactics, techniques, and procedures (TTPs) and emerging exploitation methods.
• Develop IOCs, YARA and Sigma rules, detection signatures, and other technical content that supports threat hunting and security operations.
• Build scripts, automation, and tools that improve malware analysis and reverse engineering workflows.
• Partner with threat intelligence, incident response, SOC, and engineering teams to translate technical research into actionable recommendations.
• Document and communicate technical findings through reports, briefings, and research products.

Qualifications

• US Citizenship
• TS Clearance
• 3–8 years of experience in malware analysis, reverse engineering, vulnerability research, offensive security, or a related technical cybersecurity field.
• Hands-on experience reverse engineering compiled software and performing static and dynamic malware analysis.
• Experience with reverse engineering and debugging tools such as Ghidra, IDA Pro, Binary Ninja, or similar tools.
• Strong understanding of Windows and Linux internals.
• Knowledge of assembly language, including x86, x64, or ARM, and executable file formats.
• Proficiency in at least one programming language such as Python, C, C++, Rust, or Go.
• Understanding of software exploitation, memory corruption vulnerabilities, and common attack methodologies.
• Strong investigative and problem-solving skills with the ability to clearly communicate highly technical findings.

Even better if you have...

• Experience researching zero-day vulnerabilities or advanced exploitation techniques.
• Experience with nation-state threats or sophisticated cyber campaigns.
• Experience analyzing firmware, embedded systems, or mobile applications.
• Experience supporting federal government, defense, intelligence community, or critical infrastructure cybersecurity missions.

Next Steps:

If your application looks like a match, someone from our People Operations team will reach out to schedule a phone screening. During this conversation, we will determine if the current or future position aligns with your experience and skills. If things go well, from there you'll meet with members from the project team, including the hiring manager and teammates, and possibly be asked to submit a writing assessment to showcase your practical knowledge. If we find you are a match, you’ll get a call offering you the role. While we wish we could hire every great candidate who comes our way, the reality is that we can't. If you are not selected, we will be sure to connect with you and let you know so you can move on with your search. We will also keep your resume for future needs.

Partner Forces is an equal opportunity employer. We do not discriminate based on race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by applicable law. We are committed to fostering a workplace where everyone feels valued and respected. If you require a reasonable accommodation during the application process, please contact us at recruiting@partnerforces.com.