Reverse Engineering

Reverse Engineering Cybersecurity Jobs

3 jobs found

11d ago

Security Engineer III, Exploitation Analyst / Incident Responder

Deloitte Rosslyn, VA

Rosslyn, VA

11d ago

$103k - $189k/yr Full time Cyber Forensics Cybersecurity Tools Endpoint Detection & Response

Apply Now

Job Description

Deloitte’s Cyber Defense & Resilience team helps protect enterprise environments by turning real threat activity into measurable improvements. As a Cyber Exploitation Analyst and Incident Responder, you will combine analysis, investigation, and security engineering to strengthen security posture across complex systems, while preparing clear technical reporting for stakeholders. The role is onsite in Rosslyn, VA, with an expected up to 5 days a week at a client site or Deloitte office.

This position offers a salary range of USD 102,500 - 188,900 per year. You will work within a team that monitors for malicious activity, investigates incidents, evaluates vulnerabilities, and supports remediation planning based on risk and exploitability.

Responsibilities

Monitor networks, systems, and applications for indicators of compromise and analyze threat data to identify malicious activity.
Investigate security incidents by collecting and analyzing logs, memory artifacts, and network traffic, supporting containment, eradication, and recovery activities.
Identify and assess vulnerabilities across systems, networks, and applications, recommending remediation actions informed by risk and exploitability.
Analyze malware, exploits, and adversary tools, including reverse engineering malicious code and simulating adversary techniques in controlled environments.
Prepare technical reports, briefings, and documentation that summarize findings, methodologies, and recommendations for stakeholders.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance.
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response.
Experience analyzing APTs, malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra.
Experience performing vulnerability assessments, penetration testing, or red team activities.
Experience with network traffic analysis, log analysis, digital forensics, and operating systems including Windows, Linux, and macOS, along with common network protocols.
Scripting and security tooling experience, including Python, PowerShell, or Bash, and security monitoring tools such as SIEM, IDS, IPS, or EDR.
Ability to travel up to 20%, on average.
Ability to work client onsite or at Deloitte office up to 5 days a week.
Industry certification such as GIAC, CISSP, or CompTIA Security+ is required.
Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Technology & Frameworks

IDA Pro, Ghidra, Python, PowerShell, Bash
SIEM, IDS, IPS, EDR
Windows, Linux, macOS
MITRE ATT&CK

What a Successful Candidate Demonstrates

Ability to work independently while collaborating as part of a team.
Effective written and verbal communication skills.
Meticulous attention to detail and quality-focused work output.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams and manage/prioritize multiple tasks in a fast-paced environment.
Strong interpersonal skills and professional demeanor, with the ability to meet deadlines.
Ability to provide clear guidance to others.

Preferred

Experience supporting incident response in government, defense, intelligence, or large enterprise environments.
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts.
Experience mapping threat activity to the MITRE ATT&CK framework.
Experience developing or tuning detections for SIEM or EDR platforms.
Industry certifications such as GIAC, CISSP, or CompTIA Security+.

View full job page →

11d ago

Security Engineer III, Exploitation Analyst / Incident Responder

Deloitte Rosslyn, VA

Rosslyn, VA

11d ago

$103k - $189k/yr Full time Cybersecurity Tools Endpoint Security Engineer

Apply Now

Job Description

Work onsite in Rosslyn, VA as part of Deloitte Cyber Defense & Resilience, supporting cyber exploitation analysis and incident response.

Responsibilities

Continuously monitor networks, systems, and applications for indicators of compromise and analyze threat data to identify malicious activity
Investigate security incidents by collecting and analyzing logs, memory artifacts, and network traffic, and support containment, eradication, and recovery activities
Identify and assess vulnerabilities across systems, networks, and applications; recommend remediation actions based on risk and exploitability
Analyze malware, exploits, and adversary tools, including reverse engineering malicious code and simulating adversary techniques in controlled environments
Produce technical reports, briefings, and documentation summarizing findings, methodologies, and recommendations for stakeholders

Requirements

Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
Active Top-Secret Clearance
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response
Experience analyzing APTs, malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra
Experience performing vulnerability assessments, penetration testing, or red team activities
Experience with network traffic analysis, log analysis, digital forensics, Windows, Linux, macOS, common network protocols
Scripting experience with Python, PowerShell, or Bash
Experience using security monitoring tools such as SIEM, IDS, IPS, or EDR
Ability to travel up to 20% on average
Must be willing to work client onsite or Deloitte office up to 5 days a week
Industry certifications such as GIAC, CISSP, or CompTIA Security+ is required
Must be legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

IDA Pro
Ghidra
Python
PowerShell
Bash
SIEM
IDS
IPS
EDR
Windows
Linux
macOS
MITRE ATT&CK

The Team

Deloitte Cyber Defense & Resilience helps clients defend against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence
Supports protection and management of dynamic attack surfaces and provides rapid crisis and cyber incident response, enabling clients to be ready for, respond to, and recover from business disruptions

Preferred

Experience supporting incident response in government, defense, intelligence, or large enterprise environments
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts
Experience mapping threat activity to the MITRE ATT&CK framework
Experience developing or tuning detections for SIEM or EDR platforms
Industry certifications such as GIAC, CISSP, or CompTIA Security+

Location

Rosslyn, VA (onsite)

Compensation

USD 102,500 - 188,900 per year

You may also be eligible to participate in a discretionary annual incentive program; any award depends on individual and organizational performance and other factors.

View full job page →

1mo ago

Principal / Senior Principal Embedded Systems Security Engineer

Northrop Grumman Baltimore, MD

Baltimore, MD

1mo ago Closed

$120k - $179k/yr Full time Senior Anti Tamper Cyber Security

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Lead embedded systems security efforts for sensor payload and mission systems in a 100% onsite role.

Responsibilities

Implement and support compliance with government policies (including JSIG and DAAPM) by reviewing process tailoring needs and approving documented procedures
Perform analyses to validate security requirements and define additional safeguards to improve overall system security
Support formal Security Test and Evaluation (ST&E) activities through pre-test preparation, active testing support, result analysis, and preparation of required reports
Document findings from Assessment and Authorization efforts, including technical work and coordination activities
Prepare and maintain system Security Plans and keep the Plan of Actions and Milestones (POA&M) updated
Oversee and communicate exportability analyses and required modifications for system, subsystem, or sensor exportability, ensuring alignment with international standards
Collaborate with program teams and global Business Development personnel to incorporate international requirements and features into design processes and support product line initiatives for global markets
Apply full life cycle development experience including architecture design, trade studies, cybersecurity requirements formulation, detailed design, unit testing, system testing, and validation and verification practices
Drive cybersecurity technology development planning aligned to global strategic priorities and inform current and future policies
Use reverse engineering techniques to architect and validate cybersecurity solutions
Participate in communities of practice to strengthen domain knowledge and support continuous professional growth

Requirements

Principal Basic Qualifications: Bachelor’s degree with 5 years of experience, or Master’s degree with 3 years, or PhD with 1 year in Science, Technology, Engineering, or Mathematics (or related technical fields; an additional 4 years of experience may be considered in lieu of a degree)
Senior Principal Basic Qualifications: Bachelor’s degree with 8 years of experience, or Master’s degree with 6 years, or PhD with 4 years in Science, Technology, Engineering, or Mathematics (or related technical fields; an additional 4 years of experience may be considered in lieu of a degree)
U.S. Citizenship required
Active/Current DoD Secret Clearance required
Ability to obtain and maintain Special Access Program (SAP) access prior to start
2 years of system engineering experience with DoD-based platforms, sensors and/or subsystems (including examples such as EO/IR, embedded software or cryptography, satellite, architecture development, hardware design, RF, radar, and undersea sensors)
2 years of experience with requirements development, derivation, system integration & test, and validation and verification
2 years of experience with anti-tamper, reverse engineering, and/or Risk Management Framework and cyber resiliency

Technologies / Keywords

JSIG, DAAPM, ST&E, POA&M
Risk Management Framework, Cyber Resiliency
Anti-tamper, Reverse Engineering
Cryptography, EO/IR
RF, Radar, Undersea Sensors, Satellite
SAP

Benefits

Health Plan
Savings Plan
Paid Time Off
Additional benefits including Education Assistance, Training and Development, and 9/80 Work Schedule (where available)
Comprehensive benefits package including health insurance coverage, life and disability insurance, company-paid holidays, and PTO

Relocation Assistance

Relocation assistance may be available

Clearance and Work Conditions

Clearance required for start: Yes
Clearance type: Secret
Travel: Yes, up to 10%
Onsite requirement: 100% onsite
Contingent conditions: Contract award, successful transfer of an active DoD Secret Clearance, and ability to obtain Special Program Access
Position may be filled as a Principal Embedded Systems Security Engineer or Senior Principal Embedded Systems Security Engineer

Preferred Qualifications

Advanced degrees in Science, Technology, Engineering or Mathematics (or related technical fields)
Active Top Secret Clearance or higher
Experience with Hardware (Firmware) Assurance, Software Attack Surface Analysis Report, Select Software/Firmware Encryption, and Secure Key Handling
Experience identifying and mitigating software assurance vulnerabilities and performing integration testing of mitigation/resolution
Experience contributing to and/or making technical presentations to internal and external customers

View full job page →

Reverse Engineering Cybersecurity Jobs

Security Engineer III, Exploitation Analyst / Incident Responder

Security Engineer III, Exploitation Analyst / Incident Responder

Principal / Senior Principal Embedded Systems Security Engineer

Get Reverse Engineering Cybersecurity Jobs alerts