Exploitation

Exploitation Cybersecurity Jobs

2 jobs found

8d ago

Exploit Developer/Penetration Tester 2/3

Northrop Grumman Virginia

Virginia

8d ago

$92k - $171k/yr Full time Senior Cybersecurity Tools Exploit Development

Apply Now

Job Description

Flexible work arrangements, phenomenal learning opportunities, and a friendly team environment define the culture at Northrop Grumman. You’ll benefit from exceptional benefits and healthcare, a 9/80 work schedule, and a 401k matching program, with a hybrid role that supports collaboration across teams and exposure to a wide range of projects and customers.

Hybrid Exploit Developer/Penetration Tester level 2/3 focused on reverse engineering, exploit development, and adversarial cyber testing within the Cyber Assessment Tiger Team, with travel up to 25% per year.

Responsibilities

Perform code analysis and hardware and binary reverse engineering to understand functionality and identify vulnerabilities in hardware and software, including avionics and embedded systems.
Assess security configurations to determine effectiveness and potential exploitation opportunities.
Design and execute full adversarial cyber testing scenarios against components, applications, operating systems, or end-to-end integrated systems.
Contribute to the design, development, deployment, and integration of offensive cyber operations tools across platforms, payloads, and systems.
Contribute to shaping system cyber survivability attributes through design, development, implementation, and integration.
Assist in preparing and delivering technical reports and briefings.
Continuously develop personal knowledge and advance the capabilities of the broader team.

Requirements

Level 2 requires a High School Diploma or GED and 6 years of experience in Cyber Security, Red Team, Penetration Testing, or Exploit Development.
Level 3 requires a High School Diploma or GED and 9 years of experience in Cyber Security, Red Team, Penetration Testing, or Exploit Development.
Experience in software development to support penetration testing, including vulnerability development, reverse engineering tool modules, covert tunneling, scanning scripts, and passive collection.
Two years of experience in at least three of the following languages: C, C++, C#, Python, Ruby, Rust, Bourne/Bash, PowerShell, Visual Basic, Go, PHP, Javascript, HTML.
Willingness to travel domestically and internationally up to 25% per year.
Ability to obtain and maintain a DoD Top Secret security clearance as a condition of continued employment; additional clearances may be required for certain government programs.

Technologies

C, C++, C#, Python, Ruby, Rust, Bourne/Bash, PowerShell, Visual Basic, Go, PHP, Javascript, HTML
Linux, Unix, Windows
OSCP, OSCE, OSEE, GPEN, GXPN
Integrity (RTOS), Nucleus (RTOS), VxWorks (RTOS)
PowerPC, ARM, Xilinx FPGA, RISCx
Assembly language
ARINC 429, MIL-STD-1553, Spacewire
Cryptanalysis

View full job page →

1mo ago

Cybersecurity Threat and Exploitation Analyst

Booz Allen Hamilton San Diego, CA

San Diego, CA

1mo ago Closed

$87k - $198k/yr Full time Analyst Cybersecurity Exploitation

This position is no longer accepting applications (closed Aug 7, 2026).

Job Description

Booz Allen Hamilton is seeking a Cybersecurity Threat and Exploitation Analyst to identify threat vectors, design attack methodologies, and develop exploits, while reinforcing defensive operations across critical infrastructure and mission sets. This onsite opportunity in San Diego, CA blends hands-on testing with proactive cyber operations to support national security objectives.

Responsibilities

perform rigorous testing and analysis to identify threat vectors, craft attack methodologies, and create and deploy exploits
leverage emerging technologies to enhance cyber operations
identify vulnerabilities across systems and networks
build tools and tactics that align with real-world mission requirements
support defensive cyber operations across diverse platforms, networks, and systems
identify and mitigate risk to strengthen the security and resilience of critical infrastructure and mission sets
contribute to national security by developing advanced cyber capabilities

Requirements

minimum 5 years supporting a DoD or government organization with information systems security, cybersecurity, networks, or communications systems
at least 3 years supporting red or blue teams and conducting red/blue team events
3+ years in a security operations center or cyber operations environment, including vulnerability assessments and risk management of networks, systems, and communications protocols
knowledge of the Risk Management Framework (RMF), including A&A activities, RMF artifact development, and deliverables across all steps, plus cybersecurity compliance testing using tools such as ACAS and STIG guidance
proficiency in Python and PowerShell for scripting, querying, and analytics
ability to use threat intelligence to inform planning and exercises, improve security hardening, and participate in incident response activities such as artifact analysis, incident reporting, and security event triage
capability to write concise briefings, presentations, and reports to convey analysis and support client deliverables, work independently, identify problems, and drive tasks from start to finish
TS/SCI clearance with polygraph
HS diploma or GED
DoD 8140 Certification

Technologies

Python
PowerShell
Assured Compliance Assessment Solution (ACAS)
DoD STIG (Security Technical Implementation Guides)
Risk Management Framework (RMF)
GitHub
Docker and containerization
CI/CD pipelines
Windows and Linux environments
Web application firewalls, web proxy, intrusion prevention systems
Vulnerability scanners and penetration tooling
RedSeal

Benefits

health, life, disability, financial, and retirement benefits
paid leave
professional development opportunities
tuition assistance
work-life programs
dependent care benefits
recognition awards program

Clearance

Applicants selected will undergo a security investigation and must meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

Nice If You Have

experience with operational readiness, mission engineering, and integration
experience with RedSeal
experience with endpoint security
exposure to threat detection, cyber kill chains, vulnerability exploitation and management, TTPs, and endpoint detection and response
network engineering experience across Windows, Linux, and virtual operating systems, including security tools and technologies such as firewalls, web proxies, IDS/IPS, vulnerability scanners, and penetration tools
knowledge of DevSecOps, GitHub, Docker, containerization, and CI/CD pipelines
ability to learn new technologies and implement updated security controls, with the ability to articulate industry best practices and threat-based cybersecurity frameworks
bachelor's degree
certifications such as CEH, OSCP, GCTH, GCTI, or GCIH

Work Model

Remote: occasional on-site requirements may apply at Booz Allen or client facilities
Hybrid: regular on-site presence at a Booz Allen facility is expected, with potential visits to client sites as needed
Onsite: largely performed at a Booz Allen office or client facility, with direct collaboration with colleagues and customers

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable laws.

View full job page →

Exploitation Cybersecurity Jobs

Exploit Developer/Penetration Tester 2/3

Cybersecurity Threat and Exploitation Analyst

Get Exploitation Cybersecurity Jobs alerts