Staff Attack Engineer (Cybersecurity)

Location: Remote in the United States; up to 5% travel may be required.

Salary: $238,000–$280,000 annual base salary, plus equity in the form of stock options.

Company

hirify.global is a remote cybersecurity product company developing NodeZero, an autonomous pentesting platform for identifying, validating, and helping remediate exploitable attack paths across enterprise environments.

What you will do

• Design, build, and maintain scalable production reconnaissance workflows in Python for discovering, enumerating, and fingerprinting external-facing assets and services.
• Research, parse, enrich, and organize large volumes of unstructured external data, including banners, web content, documents, error output, certificates, identities, and exposed credentials.
• Extend attack-path modeling and graph data structures to represent identity, privilege, asset, and trust relationships.
• Automate safe, repeatable multi-step attack workflows spanning discovery, credential access, initial access, and post-exploitation.
• Research emerging external attack techniques, create production attack content, and maintain representative environments for validation and regression testing.
• Set technical priorities and coverage roadmaps, mentor attack engineers, collaborate with engineering, product, and customer-facing teams, and author technical documentation and research.

Requirements

• Deep hands-on offensive experience against external attack surfaces, from reconnaissance through initial access and post-exploitation.
• 10+ years of hands-on experience in offensive security, security research, or security-focused software engineering, including recent work building and shipping offensive tooling.
• Experience building reconnaissance and discovery systems that operate at scale rather than one-off scripts.
• Strong ability to research and parse large amounts of messy, unstructured external data and turn it into trustworthy, actionable information.
• Experience collecting, storing, and connecting high volumes of data as relationships between identities, assets, and trust.
• Command of identity-focused tradecraft, including credential access, password and token attacks, SSO and federation weaknesses, and movement across identities, tenants, and services.
• Experience automating multi-step attack workflows end to end.
• Strong software engineering fundamentals with Python and a record of shipping and maintaining production-quality code.
• Ability to independently research unfamiliar systems and technologies, become a subject-matter expert, communicate clearly, and build products rather than only find vulnerabilities.

Nice to have

• OSCP, OSEP, CRTO, or an equivalent offensive certification.
• Experience with certificate transparency, passive DNS, internet-wide scanning, and other large-scale internet data sources and tooling.
• Experience with cloud, SaaS, and hybrid identity attack surfaces, including Entra ID, Okta, AWS, and on-premises-to-cloud pivots.
• Experience with external-to-internal pivoting and perimeter footholds.
• Experience with graph databases, attack-path analysis, data lakes, or high-volume data storage and processing.
• Experience developing or contributing to offensive or reconnaissance tooling.
• Public contributions such as open-source tools, technical blog posts, conference talks, or published CVEs.
• Experience building production-safe autonomous or automated offensive tooling.

Culture & Benefits

• Fully remote work with a collaborative, inclusive culture focused on respect, ownership, and results.
• Health, vision, and dental insurance for employees and families.
• Flexible vacation policy and generous parental leave.
• Career development opportunities in a growing cybersecurity product company.
• Full-time employment includes equity in the form of stock options.