Security Researcher (Cybersecurity)

Location: Miami, US; hybrid work with 3 days in the office per week.

Company

hirify.global develops an AI-powered security and IT platform covering identity and access, endpoint security and management, and compliance automation.

What you will do

• Own detection development end to end, from adversary research and rule writing through validation, release, and ongoing maintenance in the EDR product.
• Develop file-based and behavioral detections for Windows and macOS using YARA, Sigma, and internal rule formats.
• Analyze malware, hunt emerging threats, map coverage to MITRE ATT&CK, and prioritize detection gaps.
• Test detections against real samples and emulated adversary behavior, and identify telemetry and sensor improvements with engineering.
• Contribute intelligence to the Vulnerability product by triaging CVEs, correcting vulnerability data, and matching software versions to real inventories.
• Build analysis, monitoring, sample-processing, and rule-testing automation; review team content and publish research through blog posts and conference talks.

Requirements

• 3–5 years of cybersecurity experience focused on detection engineering and malware analysis; strong Windows depth, with working familiarity with macOS and willingness to deepen it.
• Experience building and shipping endpoint file-based and behavioral detections using YARA and Sigma in a product or production environment.
• Experience taking detections from research through testing and release, then maintaining them as adversary behavior changes.
• Strong understanding of Windows and macOS internals, endpoint security mechanisms, ETW, kernel callbacks, Endpoint Security APIs, and related telemetry.
• Working knowledge of adversary tradecraft and MITRE ATT&CK detection coverage frameworks.
• Experience with malware analysis tools and techniques, including Binary Ninja, Ghidra, IDA, WinDbg, Sysinternals, or Mac Monitor.
• Experience with threat intelligence platforms such as Vhirify.globalsTotal or Google Threat Intelligence, including retrohunting and hunting rule development.
• Working knowledge of CVE and vulnerability data ecosystems, including NVD, vendor advisories, CPE, and version matching.
• Proficiency with security scripting and data analysis using Python, PowerShell, Bash, and SQL, plus comfort working with large sample sets.
• Ability to communicate research externally through blog posts, conference talks, or published work.

Nice to have

• Experience developing or contributing to EDR or next-generation antivhirify.globals products.
• Experience with detection-as-code, version-controlled rules, peer review, and automated rule testing.
• Experience using AI tools, machine learning, or statistical methods for threat research and malware classification.
• Experience with malware detonation environments, sandboxing, or automated dynamic analysis.
• Familiarity with Windows and macOS threat landscapes and platform-specific attack techniques.
• Experience assessing and prioritizing vulnerabilities using severity scoring, exploit prediction, and known-exploited catalogs.

Culture & Benefits

• Hybrid work environment with 3 days in the office per week.
• Medical, dental, and vision coverage for employees and dependents, plus a 401(k) with a 4% company match.
• 20 days of PTO, Wellness Week, paid family and medical leave, and up to 16 weeks of paid parental leave.
• Equity for full-time employees, in-office lunch stipend, onsite fitness center, and free parking.
• Mental health, fertility, employee discount, and career growth benefits.
• Inclusive workplace focused on diverse perspectives and equal employment opportunity.