Exploit Analysis

Exploit Analysis Cybersecurity Jobs

2 jobs found

Today

Security Engineer III, Exploitation Analyst / Incident Responder

Deloitte Baltimore, MD

Baltimore, MD

Today

$103k - $189k/yr Full time Cyber Forensics Cyber Investigation Cyber Investigations

Apply Now

Job Description

Deloitte’s Cyber Defense & Resilience team helps clients defend against advanced threats by modernizing security operations, monitoring technology, data analytics, and threat intelligence. The work supports protecting dynamic attack surfaces and delivering rapid crisis and cyber incident response so organizations can be ready for, respond to, and recover from business disruptions.

Onsite in Baltimore, MD, you will join a team that emphasizes practical analysis and actionable recommendations across enterprise environments. This role combines cyber exploitation analysis with incident response, giving you a direct path to drive improvements in security posture while supporting complex investigations.

Responsibilities

Monitor networks, systems, and applications for indicators of compromise, and analyze threat data to identify malicious activity.
Investigate security incidents by collecting and analyzing logs and artifacts, including memory artifacts and network traffic, and support containment, eradication, and recovery activities.
Identify and assess vulnerabilities across systems, networks, and applications, then recommend remediation actions based on risk and exploitability.
Analyze malware, exploits, and adversary tools, including reverse engineering malicious code and simulating adversary techniques in controlled environments.
Prepare technical reports, briefings, and documentation that summarize findings, methodologies, and recommendations for stakeholders.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance.
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response.
Experience with advanced persistent threats (APTs), malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra.
Experience performing vulnerability assessments, penetration testing, or red team activities.
Experience with network traffic analysis, log analysis, digital forensics, and operating systems including Windows, Linux, and macOS.
Experience with common network protocols; scripting languages such as Python, PowerShell, or Bash; and security monitoring tools including SIEM, IDS, IPS, or EDR.
Ability to travel up to 20% on average based on work, clients, and industries/sectors served.
Willingness to work at client onsite or Deloitte office for up to 5 days a week.
Industry certifications such as GIAC, CISSP, or CompTIA Security+ are required.
Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Tools & Technologies

IDA Pro, Ghidra, MITRE ATT&CK (and the MITRE ATT&CK framework)
Python, PowerShell, Bash
SIEM, IDS, IPS, EDR
Windows, Linux, macOS

Additional Team Context

Deloitte’s Cyber Defense & Resilience offering is built to help clients manage and protect dynamic attack surfaces, strengthen monitoring and threat intelligence, and provide rapid crisis and cyber incident response to support continuity during disruptive events.

Preferred

Experience supporting incident response in government, defense, intelligence, or large enterprise environments.
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts.
Experience mapping threat activity to the MITRE ATT&CK framework.
Experience developing or tuning detections for SIEM or EDR platforms.
Industry certifications such as GIAC, CISSP, or CompTIA Security+.

View full job page →

Today

Security Engineer III, Exploitation Analyst / Incident Responder

Deloitte Rosslyn, VA

Rosslyn, VA

Today

$103k - $189k/yr Full time Cybersecurity Tools Endpoint Security Engineer

Apply Now

Job Description

Work onsite in Rosslyn, VA as part of Deloitte Cyber Defense & Resilience, supporting cyber exploitation analysis and incident response.

Responsibilities

Continuously monitor networks, systems, and applications for indicators of compromise and analyze threat data to identify malicious activity
Investigate security incidents by collecting and analyzing logs, memory artifacts, and network traffic, and support containment, eradication, and recovery activities
Identify and assess vulnerabilities across systems, networks, and applications; recommend remediation actions based on risk and exploitability
Analyze malware, exploits, and adversary tools, including reverse engineering malicious code and simulating adversary techniques in controlled environments
Produce technical reports, briefings, and documentation summarizing findings, methodologies, and recommendations for stakeholders

Requirements

Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
Active Top-Secret Clearance
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response
Experience analyzing APTs, malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra
Experience performing vulnerability assessments, penetration testing, or red team activities
Experience with network traffic analysis, log analysis, digital forensics, Windows, Linux, macOS, common network protocols
Scripting experience with Python, PowerShell, or Bash
Experience using security monitoring tools such as SIEM, IDS, IPS, or EDR
Ability to travel up to 20% on average
Must be willing to work client onsite or Deloitte office up to 5 days a week
Industry certifications such as GIAC, CISSP, or CompTIA Security+ is required
Must be legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

IDA Pro
Ghidra
Python
PowerShell
Bash
SIEM
IDS
IPS
EDR
Windows
Linux
macOS
MITRE ATT&CK

The Team

Deloitte Cyber Defense & Resilience helps clients defend against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence
Supports protection and management of dynamic attack surfaces and provides rapid crisis and cyber incident response, enabling clients to be ready for, respond to, and recover from business disruptions

Preferred

Experience supporting incident response in government, defense, intelligence, or large enterprise environments
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts
Experience mapping threat activity to the MITRE ATT&CK framework
Experience developing or tuning detections for SIEM or EDR platforms
Industry certifications such as GIAC, CISSP, or CompTIA Security+

Location

Rosslyn, VA (onsite)

Compensation

USD 102,500 - 188,900 per year

You may also be eligible to participate in a discretionary annual incentive program; any award depends on individual and organizational performance and other factors.

View full job page →

Exploit Analysis Cybersecurity Jobs

Security Engineer III, Exploitation Analyst / Incident Responder

Security Engineer III, Exploitation Analyst / Incident Responder

Get Exploit Analysis Cybersecurity Jobs alerts