[PaulHoule]

Do you have experience? If a person has the right kind of/enough experience I wouldn't care about their degree or lack thereof.

In the case of malware analysis I would expect somebody to analyze malware and write a report, I am sure you have seen these. These aren't too different from the kind of reports you would write in school; if you blogged about how you took apart a bad SD card you bought, that would demonstrate you have the research and communication skills that somebody might have learned in school.

Malware analysis also requires a holistic understanding about computers that a CS education is supposed to give you. You can get that understanding through reading and tinkering if you have aptitude for it, enjoy it, work hard at it and manifest that.