Senior Attack Engineer (Cybersecurity)

Location: US, Remote; up to 5% travel may be required.

Base salary: $206,278–$242,680 annually; full-time roles are also eligible for equity in the form of stock options.

Company

hirify.global is a remote cybersecurity product company developing NodeZero, an autonomous pentesting platform that finds, fixes, and verifies exploitable attack vectors across internal, external, cloud, and hybrid cloud environments.

What you will do

• Design, build, and maintain highly scalable Python reconnaissance workflows that discover, enumerate, and fingerprint external-facing assets and services.
• Research and parse large volumes of unstructured external-facing data, turning banners, web content, documents, error output, and other sources into accurate, actionable information.
• Collect, store, and connect high-volume information while extending attack-path and graph data models for identity, privilege, and relationship paths.
• Automate complete, safely proven attack workflows covering discovery, credential access, initial access, and post-exploitation.
• Research emerging external tradecraft, convert it into production attack content, and maintain representative test environments for validation and regression testing.
• Contribute to coverage priorities, mentor engineers, define engineering and operational standards, collaborate cross-functionally, and author technical documentation and research.

Requirements

• Deep, hands-on offensive experience against external attack surfaces from reconnaissance through initial access and post-exploitation.
• 5+ years of experience in offensive security, security research, and/or security-focused software engineering, including recent work building and shipping offensive tooling.
• Experience building reconnaissance and discovery systems that run at scale, rather than one-off scripts.
• Strong ability to research and parse large amounts of messy, unstructured external data and turn it into trustworthy information.
• Experience collecting, storing, and connecting high volumes of data and reasoning about identities, assets, and trust relationships.
• Command of identity-focused tradecraft, including credential access, password and token attacks, SSO and federation weaknesses, and movement among identities, tenants, and services.
• Experience automating multi-step attack workflows end to end.
• Strong software engineering fundamentals with Python and a track record of shipping and maintaining production-quality code.
• Ability to independently research unfamiliar systems and technologies, rapidly build practical expertise, communicate clearly in writing and verbally, and build products rather than only finding vulnerabilities.

Nice to have

• OSCP, OSEP, CRTO, or an equivalent offensive certification.
• Experience with large-scale internet data sources and tooling, including certificate transparency, passive DNS, and internet-wide scanning.
• Experience with cloud, SaaS, and hybrid identity attack surfaces such as Entra ID, Okta, and AWS, including on-premises-to-cloud pivots.
• Experience with external-to-internal pivoting and perimeter footholds leading to additional access.
• Experience with graph databases, attack-path analysis, data lakes, or high-volume data storage and processing.
• Experience developing or contributing to offensive or reconnaissance tooling and production-safe autonomous or automated offensive tooling.
• Public contributions such as open-source tools, technical blog posts, conference talks, or published CVEs.

Culture & Benefits

• Fully remote work environment with a collaborative culture centered on respect, ownership, results, and inclusion.
• Remote and hybrid work models are supported depending on role and location; some roles require regular presence at the Chicago office.
• Health, vision, and dental insurance for employees and families.
• Flexible vacation policy, generous parental leave, equity, and competitive compensation.
• Career development opportunities and an innovative environment encouraging creativity and practical collaboration.