Cybersecurity Threat Intelligence Engineer II, Att@ck

Location: Hybrid role located on campus in Mountlake Terrace, Washington, United States

Salary: $92,400–$157,100 per year

Company

hirify.global is a healthcare organization focused on improving customers’ lives and transforming healthcare.

What you will do

• Plan and execute authorized adversary emulation, security testing, and technical assessments aligned with the MITRE ATT&CK framework.
• Research emerging adversary tactics, techniques, and procedures and translate threat intelligence into risk-based testing scenarios.
• Reproduce attacker techniques in approved environments while following rules of engagement, privacy, security, and operational safety requirements.
• Collect and analyze telemetry and technical evidence to evaluate detection, prevention, response, and defensive visibility.
• Collaborate with Threat Intelligence and Incident Response teams to recommend improvements and validate remediation effectiveness.
• Develop scripts, automation, repeatable testing procedures, documentation, reports, and briefings for technical and nontechnical stakeholders.

Requirements

• Bachelor’s degree in Information Systems or Business Administration, or four years of experience.
• At least three years of experience designing, implementing, and troubleshooting networked computer systems, including systems integration, hardware requirements, network design planning, and vendor negotiations for hardware and software.
• Within that experience, at least two years must involve secure network and systems architecture, design and implementation, intrusion detection, defense and incident response, security configuration management, access controls, and security policy and standards development.
• Sound analytical judgment, technical curiosity, strong documentation skills, and the ability to communicate complex technical findings clearly.

Nice to have

• Offensive cybersecurity or adversary emulation certifications such as OSCP, CRTO, GPEN, GXPN, eJPT, or eCPPT.
• Hands-on MITRE ATT&CK experience, including mapping adversary TTPs to security controls, logging sources, and detection capabilities.
• Experience with adversary emulation, breach and attack simulation, Purple Team exercises, or structured security control validation.
• Practical scripting and automation with Python, PowerShell, Bash, or similar languages.
• Experience developing repeatable security testing scenarios, analyzing results, and validating defensive improvements.
• Experience with EDR, network security monitoring, SIEM, identity, cloud environments, Windows, Linux, authentication technologies, networking protocols, threat intelligence, threat hunting, and healthcare security frameworks such as HITRUST.

Culture & Benefits

• Full-time employment with a hybrid on-campus model offering workplace flexibility, on-site resources, networking, and team engagement.
• Medical, vision, dental, life, disability, retirement, pension, and voluntary benefits, including pet insurance.
• 401(k) employer match, pension vested after three years, generous paid time off, and commuter benefits.
• Wellness resources, counseling, fitness facilities, nutritional counseling, and on-site activities.
• Tuition assistance for undergraduate and graduate education and employee recognition programs.