Staff Research Engineer - Exposure Intelligence (Cybersecurity)

Location: Hybrid in Boston, Massachusetts, or Columbia, Maryland, United States. Candidates must be authorized to work for any U.S. employer without sponsorship.

Base salary: $137,500–$183,500 USD per year, plus potential variable compensation.

Company

hirify.global provides exposure management and cybersecurity solutions used by organizations, government agencies, and large enterprises worldwide.

What you will do

• Execute the daily intelligence production cycle by monitoring sources, triaging developments, assessing vulnerabilities, and publishing operational briefs and external intelligence digests.
• Analyze zero-days, exploit maturity, attacker interest, blast radius, and exposure conditions using structured judgment and confidence calibration.
• Produce threat assessments, actor and campaign profiles, CVE analyses, analytical notes, blog posts, webinars, and conference content.
• Contribute to classification standards, analytical methodologies, source management practices, and AI-assisted workflows.
• Respond to intelligence requests from product teams and leadership and help shape strategic analytical priorities.

Requirements

• 7+ years of cybersecurity experience with depth in at least two areas: vulnerability research, threat intelligence analysis, security operations, or exposure and risk management.
• Experience producing structured, multi-source intelligence assessments with confidence ratings and documented methodology.
• Deep knowledge of the vulnerability lifecycle, CVSS, exploit maturity, CISA KEV, and active exploitation.
• Strong understanding of threat actors, campaigns, attribution frameworks, and MITRE ATT&CK TTP mapping.
• Excellent analytical writing and verbal communication skills, sound judgment under uncertainty, and the ability to manage concurrent priorities.
• U.S. work authorization without current or future visa sponsorship is required.

Nice to have

• Intelligence community or military intelligence experience and familiarity with structured analytic techniques.
• Exposure management, vulnerability management at scale, cloud security, identity exposure, shadow AI, or OT/IoT experience.
• AI-assisted analytical workflows and scripting or automation with Python, Bash, APIs, or similar tools.
• Experience with hirify.global products, Shodan, Censys, GreyNoise, OSINT, Jira, or Confluence.
• Experience writing for external audiences, including blogs, technical papers, conference talks, or media interviews.

Culture & Benefits

• Collaborative environment focused on cybersecurity innovation, belonging, respect, and excellence.
• Medical, dental, vision, disability, and life insurance.
• 401(k) retirement savings with company match and an employee stock purchase plan.
• Paid time off, company-paid holidays, parental leave, education assistance, and flexible spending accounts.
• Employee assistance, health and wellness events, community programs, and referral benefits.