Exploit Analysis

Exploit Analysis Engineer Jobs

2 jobs found

Today

Security Engineer III, Exploitation Analyst / Incident Responder

Deloitte Baltimore, MD

Baltimore, MD

Today

$103k - $189k/yr Full time Cyber Forensics Cyber Investigation Cyber Investigations

Apply Now

Job Description

Deloitte’s Cyber Defense & Resilience team helps clients defend against advanced threats by strengthening security operations, monitoring technology, data analytics, and threat intelligence. You’ll support efforts to manage and protect dynamic attack surfaces, and help enable rapid crisis and cyber incident response so clients can be ready for, respond to, and recover from business disruptions.

What you’ll do

As a Cyber Exploitation Analyst and Incident Responder, you will analyze threat activity and investigate incidents across enterprise environments. You’ll monitor networks, systems, and applications for indicators of compromise and use threat data to identify malicious activity and patterns.

Monitor networks, systems, and applications for indicators of compromise and analyze threat data to identify malicious activity.
Investigate security incidents by collecting and analyzing logs and artifacts, including memory and network traffic; support containment, eradication, and recovery activities.
Identify and assess vulnerabilities across systems, networks, and applications, then recommend remediation actions based on risk and exploitability.
Analyze malware, exploits, and adversary tools, including reverse engineering malicious code and simulating adversary techniques in controlled environments.
Produce technical reports, briefings, and documentation that summarize findings, methodologies, and recommendations for stakeholders.

Skills and qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance.
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response.
Experience analyzing advanced persistent threats (APTs), malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra.
Experience performing vulnerability assessments, penetration testing, or red team activities.
Hands-on experience with network traffic analysis, log analysis, and digital forensics, including Windows, Linux, and macOS, common network protocols, and scripting languages such as Python, PowerShell, or Bash.
Experience with security monitoring tools such as SIEM, IDS, IPS, and EDR.
Ability to travel up to 20% on average based on work, clients, and industries/sectors served.
Ability to work at client onsite or a Deloitte office for up to 5 days a week.
Must have industry certifications such as GIAC, CISSP, or CompTIA Security+ (required).
Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Preferred qualifications

Experience supporting incident response in government, defense, intelligence, or large enterprise environments.
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts.
Experience mapping threat activity to the MITRE ATT&CK framework.
Experience developing or tuning detections for SIEM or EDR platforms.
Industry certifications such as GIAC, CISSP, or CompTIA Security+.

Technologies you may work with

IDA Pro, Ghidra, Python, PowerShell, Bash
SIEM, IDS, IPS, EDR
Windows, Linux, macOS
MITRE ATT&CK, Global Information Assurance Certification (GIAC), Certified Information Systems Security Professional (CISSP), CompTIA Security+

Location: Baltimore, MD (onsite)
Compensation: USD 102,500 - 188,900 per year

View full job page →

Today

Security Engineer III, Exploitation Analyst / Incident Responder

Deloitte Rosslyn, VA

Rosslyn, VA

Today

$103k - $189k/yr Full time Cybersecurity Tools Endpoint Security Exploit Analysis

Apply Now

Job Description

Deloitte is hiring a Security Engineer III focused on cyber exploitation analysis and incident response for work in Rosslyn, VA.

Responsibilities

Monitor networks, systems, and applications for indicators of compromise and analyze threat data to identify malicious activity
Investigate security incidents by collecting and analyzing logs, memory artifacts, and network traffic
Support containment, eradication, and recovery activities during incident response
Identify and assess vulnerabilities across systems, networks, and applications
Recommend remediation actions based on risk and exploitability
Analyze malware, exploits, and adversary tools, including reverse engineering malicious code
Simulate adversary techniques in controlled environments
Produce technical reports, briefings, and documentation covering findings, methods, and recommendations for stakeholders

Requirements

Ability to work independently and collaborate with a team
Strong written and verbal communication skills
Meticulous attention to detail and commitment to quality output
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast paced, dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related technical field
Active Top-Secret Clearance
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response
Experience analyzing APTs, malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra
Experience performing vulnerability assessments, penetration testing, or red team activities
Experience with network traffic analysis, log analysis, digital forensics, and operating systems including Windows, Linux, and macOS
Experience with common network protocols, scripting languages including Python, PowerShell, and Bash, and security monitoring tools including SIEM, IDS, IPS, and EDR
Ability to travel up to 20% on average
Willingness to work client onsite or at a Deloitte office up to 5 days a week
Industry certifications such as GIAC, CISSP, or CompTIA Security+ is required
Legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

IDA Pro
Ghidra
Python
PowerShell
Bash
SIEM
IDS
IPS
EDR
Windows
Linux
macOS
MITRE ATT&CK

Team

Deloitte Cyber Defense & Resilience helps clients defend against advanced threats through security operations transformation, monitoring technology, data analytics, and threat intelligence
Supports management and protection of dynamic attack surfaces and provides rapid crisis and cyber incident response to help clients prepare for, respond to, and recover from business disruptions

Preferred

Experience supporting incident response in government, defense, intelligence, or large enterprise environments
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts
Experience mapping threat activity to the MITRE ATT&CK framework
Experience developing or tuning detections for SIEM or EDR platforms
Industry certifications such as GIAC, CISSP, or CompTIA Security+

Location and Compensation

Location: Rosslyn, VA (onsite)
Estimated wage range: $102,500 - $188,900 per year

Incentive Program

May be eligible for a discretionary annual incentive program
Award, if any, depends on individual and organizational performance

View full job page →

Exploit Analysis Engineer Jobs

Security Engineer III, Exploitation Analyst / Incident Responder

Security Engineer III, Exploitation Analyst / Incident Responder

Get Exploit Analysis Engineer Jobs alerts