Senior Attack Engineer (Cybersecurity)

Location: US, Remote; up to 10% travel may be required.

Base salary: $206,278–$242,680; full-time roles are also eligible for equity in the form of stock options.

Company

hirify.global is a remote cybersecurity product company developing NodeZero, an autonomous pentesting platform that finds, safely proves, and helps remediate exploitable attack paths across internal, external, cloud, and hybrid-cloud environments.

What you will do

• Research and develop autonomous red-team capabilities, internal network breach techniques, and offensive security automation for NodeZero.
• Research network protocol exploitation, Active Directory abuse, management-plane attacks, delegation, credential access, and hybrid identity pivots, then turn findings into production attack content.
• Design, build, and maintain production-grade Python systems while balancing attack effectiveness, operational safety, reliability, scalability, and maintainability.
• Configure and exploit hardened internal test environments, monitor vulnerability databases and threat intelligence, and validate complex attack scenarios.
• Extend platform architecture and graph data models for identity, privilege-escalation, and lateral-movement paths; define coverage priorities and manage technical risks and tradeoffs.
• Mentor teammates, improve engineering and research practices, collaborate with engineering, product, and customer-facing teams, resolve issues, enhance features, and write technical documentation.

Requirements

• Deep hands-on offensive security experience against internal enterprise networks and Active Directory, from initial foothold through domain and enterprise compromise.
• Expert-level Python proficiency and a record of shipping and maintaining tested, documented, production-quality code.
• Strong command of network protocol exploitation, privilege escalation, lateral movement, and credential access.
• Experience with object-oriented design, API integration, data structures, and scalable system components in fast-paced product environments.
• Experience designing complex software components or systems for extensibility, operational safety, performance, and long-term maintenance, and explaining architectural decisions.
• Experience independently leading complex, high-impact technical projects, making sound decisions under ambiguity, and identifying business and delivery risks.
• Strong written and verbal communication, technical documentation skills, and the ability to explain design choices, risks, and tradeoffs to technical and non-technical stakeholders.
• Experience mentoring teammates, providing architectural feedback and code reviews, and improving team processes, tooling, or technical standards.
• Offensive security and software engineering experience with a focus on turning security research into safe, maintainable product capabilities.

Nice to have

• OSCP, OSEP, CRTO, or an equivalent offensive security certification.
• Experience researching and implementing attacks against SCCM, Windows Admin Center, and other modern Windows management-plane attack surfaces.
• Familiarity with Docker, Kubernetes, Postgres, and Neo4j.
• Experience developing or contributing to BloodHound, Impacket, netexec, or similar offensive tooling.
• Hands-on experience with Neo4j and attack-path analysis, including extending models for new identity and privilege relationships.
• Experience integrating security research into production multi-tenant SaaS with attention to testing, reliability, and customer safety.
• Public contributions such as open-source tools, technical blog posts, conference talks, or published CVEs.
• Experience building production-safe autonomous or automated offensive tooling, including applying AI or LLM technologies to attack workflows.

Culture & Benefits

• Remote cybersecurity environment focused on respect, collaboration, ownership, results, diversity, equity, and inclusion.
• Hybrid and remote work models are supported depending on role and location; some roles require regular presence at the Chicago office.
• Health, vision, and dental insurance for employees and families.
• Flexible vacation policy and generous parental leave.
• Career development opportunities and a collaborative culture encouraging creativity and innovation.