Research Engineer (Cybersecurity)

Location: Onsite in Arlington, VA, with New York, NY also listed; U.S. citizenship required.

Base salary: $159K–$195K annually. Estimated total compensation: $204K–$263K.

Company

hirify.global Technologies, founded in 2024 and headquartered in Arlington, Virginia, industrializes offensive cyber operations for the United States and its allies.

What you will do

• Research adversary techniques and translate findings into practical tools, prototypes, and engineering requirements.
• Build reusable software for adversary emulation and attack-path analysis, emphasizing testing, maintainability, and operational usefulness.
• Develop and evaluate technical approaches, explaining tradeoffs and limitations.
• Analyze and enrich cyber and threat-intelligence datasets, including graph-based relationships, and turn findings into reusable research capabilities with data engineering.
• Collaborate with operators and analysts to identify gaps, validate results, and incorporate feedback.
• Document findings and technical decisions, participate in code reviews, and support reliable development practices.

Requirements

• 2–5 years of relevant experience in offensive cyber, security research, or software development, including building working tools.
• Hands-on experience in government or military cyber operations, penetration testing or red teaming, or threat hunting and intelligence.
• Proficiency in Python or Go and experience building maintainable security tooling or automation.
• Experience analyzing and combining cyber or threat-intelligence datasets with data-science techniques to test hypotheses and build analytical tools.
• Understanding of adversary techniques, network and application security, and frameworks such as MITRE ATT&CK.
• Ability to investigate unfamiliar problems, test hypotheses, communicate evidence and limitations, and explain technical findings to engineers, analysts, and operators.
• Degree in computer science, software engineering, or cybersecurity, or equivalent practical experience.
• U.S. citizenship is required; an active security clearance is not required.

Nice to have

• Experience in Digital Network Exploitation Analysis or Exploitation Analysis.
• Tools or research adopted by operational users, custom security tooling, or adversary-emulation platforms.
• Graph databases, graph queries, or multi-source intelligence analysis.
• Reverse engineering, vulnerability research, malware analysis, or exploit development.
• Applying AI or machine learning to security research.
• Relevant certifications, published research, open-source contributions, or technical talks.

Culture & Benefits

• Onsite, full-time work supporting offensive cyber capabilities for the United States and its allies.
• Medical, dental, vision, life, AD&D, and disability coverage options.
• Paid parental leave for eligible full-time employees, including 12 weeks for birthing parents, 4 weeks for non-birthing parents, and 6 weeks for adoptive, foster, or intended parents through surrogacy.
• Paid holidays, flexible PTO, 401(k) options, HSA/FSA, and dependent-care FSA.
• Benefits vary by location, role, and eligibility.