Malware Reverse Engineer

• Conduct advanced static and dynamic analysis of malware across Windows and Linux environments

• Reverse engineer complex and obfuscated binaries, including packed or anti-analysis-protected samples

• Reproduce and validate publicly disclosed vulnerabilities that are being operationalized by real-world threat actors

• Extract configuration data, artifacts, communications patterns, and command-and-control (C2) logic from malware

• Map adversary infrastructure and identify overlap across campaigns, malware families, and operators

• Translate reverse engineering findings into high-fidelity detection logic for security operations use cases

• Serve as a senior technical reviewer for malware analysis outputs, ensuring technical rigor prior to dissemination

• Support critical incident and ransomware response by distinguishing rapid response requirements from deeper forensic analysis

• Provide technical mentorship to senior analysts and help raise the engineering depth of the broader team

• Deliver concise, risk-based communications to leadership audiences when technical findings must be escalated quickly

Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.

• Minimum 10 years of professional experience in malware reverse engineering, exploit analysis, vulnerability research, or closely related cyber technical analysis roles

• Minimum 8 years of hands-on experience conducting both static and dynamic malware analysis across Windows and Linux operating environments

• Minimum 6 years of experience using advanced reverse engineering tools, including IDA Pro and Ghidra, and minimum 3 years of experience using debugging and binary analysis tooling such as x64dbg, Binary Ninja, or equivalent

• Minimum 5 years of experience analyzing packed, obfuscated, or anti-analysis-protected malware, including deconstructing custom packers and bypassing anti-debugging or anti-instrumentation techniques

• Minimum 4 years of experience working with low-level code, including assembly (x86/x64 and/or ARM), and minimum 5 years of experience developing or modifying tooling in C/C++ and/or Python to support malware analysis, artifact extraction, or configuration decryption

• Minimum 4 years of experience extracting or reconstructing C2 protocols, malware communications logic, or infrastructure artifacts to support adversary infrastructure mapping and campaign correlation

• Minimum 4 years of experience tracking malware behaviors, code reuse, infrastructure overlap, or TTPs associated with advanced threat actors or major cybercriminal groups

• Minimum 4 years of experience developing detection content based on malware analysis, including YARA, Snort, Sigma, or comparable detection logic used by SOC or detection engineering teams

• Minimum 3 years of experience reproducing, validating, or technically assessing publicly disclosed vulnerabilities or exploit chains that have been observed in active threat actor operations

• Minimum 3 years of experience serving as a technical quality reviewer for malware analysis, reverse engineering findings, or technical threat reporting produced by other analysts.

• Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate's Degree, must have minimum 6 years work experience)

• Strong written and verbal communication skills, including the ability to translate highly technical findings into concise, risk-based briefings for senior stakeholders

• Demonstrated ability to edit and refine complex technical reporting into polished, publishable deliverables suitable for both technical and executive audiences

• Ability to operate effectively under pressure, prioritize technical workstreams, and maintain analytical rigor in fast-moving response environments

• Bachelor's degree or equivalent combination of education and relevant professional experience

• Experience conducting malware analysis on embedded devices, firmware, or non-traditional computing environments

• Familiarity with the malware ecosystems, code families, or operating patterns associated with advanced threat actors such as state-sponsored groups or top-tier cybercriminal organizations

• Experience validating, challenging, or enriching third-party malware intelligence provided by commercial CTI vendors or external partners

• Demonstrated ability to challenge analytical conclusions or stakeholder assumptions using code-level evidence and defensible technical findings

• Experience mentoring senior analysts or acting as a senior technical coach across a malware analysis or reverse engineering team

• Familiarity with analysis workflows that distinguish rapid triage for operational response from deep-dive forensic deconstruction for longer-term intelligence production

• Experience packaging partially completed analysis for transfer across global teams without loss of operational context or momentum

• Strong editorial judgment in balancing technical depth, confidence, and clarity for varied stakeholder audiences

Compensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below. We anticipate this job posting will be posted until 11/30/2026. Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here: U.S. Employee Benefits | Accenture