Exploitation Analyst - Lead IV

1 day ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Columbia, Maryland

Job Description

This position directly supports CNMF operations and the tools necessary to support operations.

• Assist the CNMF/J38 in developing a prioritized backlog of capabilities for tool champions to evaluate and assist the CNMF/J38 in weapons pairing capabilities that will best support different task force missions or new emerging threats.
• Collaborate with tool champion operators, CNMF EAs and planners to identify backlogged tools for rapid evaluation to support mission outcomes.
• Conduct in-depth technical and operational analysis of targets, networks, and systems in support of cyber operations performed by the CNMF.
• Assist the teams to fuse data from SIGINT, HUMINT, OSINT, and digital network intelligence to build target packages and identify opportunities for access or disruption.
• Analyze captured data, digital artifacts, and network traffic to identify vulnerabilities, misconfigurations, and potential accesses that could be supported by tools in the backlog.
• Provide technical insight into target environments, software/hardware architecture, and security postures to inform tool development, tool evaluation and access strategies.
• Support CNMF mission planning and execution by advising task force leaders and EAs on courses of action (COAs), risk assessments and identifying new tools built in J9 that can support mission outcomes.
• Participate in technical exchanges and collaboration forums with mission partners, j9 product managers, developers, and tool champions to synchronize the development of relevant operational capabilities.
• Maintain awareness of emerging technologies, TTPs, and adversary behavior in cyberspace to refine exploitation strategies.

Columbia, Maryland

Job Description

X8 seeks an experienced former exploitation analyst and access operations expert familiar with existing access generating capabilities throughout the DoD and/or IC communities (MITM, MOTS, phishing, service based and LOTL processes). The applicant will support the CNMF/J38 in vetting mission requirements, mission packages, identify common mission goals across teams and help pair them with capabilities in the tool evaluation backlog. The EA lead will assist in developing a prioritized list of capabilities for tool champions and assist the CNMF/J38 in identifying new tool requirements to meet different task force missions.

EAs will also advise on hard targets and operations as needed. They will understand operational and business processes that support the evaluation and employment of cyber capabilities.

This position directly supports CNMF operations and the tools necessary to support operations.

• Prior experience working with and supporting ION Operators, CNA missions, or red team operations.
• Deep understanding of computer network operations (CNO), with specific expertise in supporting offensive cyber (OCO) or CNE missions.
• Familiarity with system internals across multiple operating systems (Windows, Linux, Unix, etc.), including kernel- and user-level exploitation.
• Familiarity in scripting or coding (Python, Bash, or C/C++) to support data analysis and custom tool use.
• Familiarity with key NSA and USCYBERCOM cyber platforms and databases, including but not limited to: XKEYSCORE (XKS), Unified Targeting Tool (UTT), Data Explorer (DX), ICON ZOOM, Grapevine, Rockstar, PULSE, Dev Nav Kickawesome, and Legal Eagle.
• Demonstrated expertise in target development, cyberspace operations planning, and SIGINT-Cyber convergence, contributing to over 50 serialized analytical products in support of CNMF and USCYBERCOM missions.
• Experience collaborating in cross-functional teams, ideally embedded within operational cyber missions.
• Excellent written and verbal communication skills for conveying technical information to mission stakeholders.
• Industry certifications (e.g., OSCP, GXPN, CISSP, GREM) are a plus.

• Minimum 12 years relevant experience working in USCYBERCOM, NSA or other IC partners in cyberspace operations.
• Completed RIOT and/or FORGE. Certified as a Windows or Unix exploiter with tool champ experience.
• BS or MS in a relevant technical field like Systems Engineering, Information Assurance, Computer Science, Electrical Engineering, Information Systems, physics or Software Engineering.
• No Degree? No worries - three (3) additional years relevant work experience as described above.

• Current and Active Top Secret SCI w/Polygraph

• Pay Range: $200,000+ (depending on experience, education)
• Up to $5,000 continuing education reimbursement
• Benefits: 100% medical, dental, vision, disability, life insurance
• Time Off: 24 Days PTO and 13 holidays
• 401K: up to 10% 401(k) contribution

• Entry level

• Full-time

• Business Development and…