Engineering Manager, Internal Attack (Cybersecurity)

Location: US, Remote; up to 10% travel may be required.

Base salary: $238,000–$280,000 annually, plus equity for full-time roles.

Company

hirify.global is a remote cybersecurity product company developing NodeZero, a platform for production-safe autonomous penetration testing across internal, external, cloud, and hybrid cloud environments.

What you will do

• Lead, coach, hire, and develop Attack Engineers and backend engineers working on internal network attacks.
• Set strategy and roadmap for Active Directory and internal attack coverage in hardened enterprise environments.
• Guide attack capabilities spanning credential access, Kerberos, NTLM, AD Certificate Services, SCCM, ACLs, GPOs, lateral movement, Entra ID, Linux, databases, and network devices.
• Own discovery foundations, including host discovery, service and OS fingerprinting, and credential and secrets discovery at very large network scale.
• Establish production-safety, testing, code-review, regression-testing, and observability standards for autonomous attacks.
• Partner with Product and engineering teams on attack-path graphs, data models, customer escalations, roadmap execution, and external technical communication.

Requirements

• 2+ years managing engineers on an offensive security, red team, or attack engineering team, including hiring, performance management, and career development.
• 8+ years of combined offensive security and software engineering experience, including significant hands-on experience attacking Active Directory and internal enterprise networks.
• Current Active Directory expertise covering Kerberos attacks and delegation, NTLM coercion and relay, AD Certificate Services abuse, ACL and GPO abuse, and lateral movement in hardened environments.
• Hands-on experience with Linux and Unix privilege escalation and lateral movement, database exploitation, and attacks on network services and devices.
• Production Python code-review fluency and experience with Git, merge requests, CI/CD, and product development workflows.
• Experience converting offensive findings or manual techniques into product capabilities, automated tooling, or repeatable services.
• Sound judgment regarding operational safety in customer production environments.
• Demonstrated ability to build and retain effective engineering teams, communicate with technical and business stakeholders, and set direction in ambiguous situations.

Nice to have

• Experience leading autonomous pentesting, breach and attack simulation, or other offensive security products.
• Experience with SCCM, Windows Admin Center, Entra Connect, primary refresh tokens, and seamless SSO.
• Experience scaling discovery and scanning with nmap, masscan, or nuclei across large enterprise networks.
• Experience building LLM-powered agents or applying AI to offensive security or asset discovery.
• Familiarity with Neo4j and attack-path analysis.
• OSCP, OSEP, CRTO, or equivalent certifications; public contributions such as open-source tools, technical articles, conference talks, or CVEs.
• Experience managing a fully remote engineering team.

Culture & Benefits

• Fully remote work with a mix of remote and hybrid models across the company; some roles require regular presence at the Chicago office.
• Inclusive, collaborative culture focused on respect, ownership, results, and professional growth.
• Health, vision, and dental insurance for employees and families.
• Flexible vacation policy and generous parental leave.
• Full-time employees receive equity in the form of stock options.

Hiring process

• Submitted materials may redact age-identifying information, including age, date of birth, and dates of school attendance or graduation, without penalty.