Security Engineer III: Cyber Exploitation & Incident Response

Relha LLC; Baltimore, Arlington (MD, VA); On-site; USD 103,000 - 189,000; Full time

Job summary

Deloitte is seeking a Security Engineer III, Exploitation Analyst / Incident Responder (TS Clearance) to support cyber defense efforts across enterprise environments. You will analyze threat activity, investigate incidents, assess vulnerabilities, and deliver actionable technical reports.

The role requires evaluating malware, conducting reverse engineering, and developing remediation guidance for clients. Travel up to 20% and on-site presence may be required.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.
• 2+ years in cyber exploitation analysis, threat intelligence, or incident response.
• Experience analyzing APTs, malware, exploitation techniques, and reverse engineering tools (IDA Pro, Ghidra).
• Experience with vulnerability assessments, pentesting, or red team activities.
• Experience with network traffic/log analysis, forensics, Windows/Linux/macOS, protocols, scripting (Python/PowerShell/Bash), and security monitoring tools (SIEM/IDS/IPS/EDR).
• Ability to travel up to 20%, and work onsite up to 5 days/week.
• US work authorization; GIAC/CISSP/CompTIA Security+ certifications preferred.

Responsibilities

• Monitor networks, systems, and apps for indicators of compromise and analyze threat data.
• Investigate security incidents, collect and analyze logs, memory artifacts, network traffic, and support containment and recovery.
• Identify and assess vulnerabilities and recommend remediation based on risk and exploitability.
• Analyze malware and adversary tools, including controlled reverse engineering and technique simulations.
• Prepare technical reports and stakeholder briefings detailing findings and recommendations.

Skills

Threat intelligence

Incident response

Reverse engineering

Python scripting

Team collaboration

Education

Bachelor’s degree in Cybersecurity/CS/IS/Engineering

Tools

IDA Pro

Ghidra

SIEM

EDR

Job description

Deloitte is seeking a Security Engineer III, Exploitation Analyst / Incident Responder (TS Clearance) to support cyber defense efforts across enterprise environments. You will analyze threat activity, investigate incidents, assess vulnerabilities, and deliver actionable technical reports.

The role requires evaluating malware, conducting reverse engineering, and developing remediation guidance for clients. Travel up to 20% and on-site presence may be required.