Director of Engineering, Threat Research (Cybersecurity)

Location: Remote (US), leading distributed teams across the US, Europe and Asia. Up to 15% travel may be required.

Base salary: $272,425–$320,500 annually, plus equity eligibility.

Company

hirify.global is a remote cybersecurity product company developing NodeZero, a platform for autonomous penetration testing, vulnerability validation, and security assessment operations.

What you will do

• Lead the engineering organizations for Rapid Response and Threat Hunting, defining strategy, roadmaps, ownership, outcomes, and operating mechanisms.
• Build a follow-the-sun vulnerability research organization with sub-teams in Europe and Asia, including staffing models, handoffs, escalation paths, and 24/7 coverage.
• Guide Rapid Response automation and AI-assisted research workflows while maintaining expert verification, production safety, and research rigor.
• Lead Threat Hunting capabilities that help customers investigate access, lateral movement, impact, attack context, and security telemetry.
• Partner across Product, Engineering, Design, Data, Marketing, Customer Success, Sales, and Channel to deliver complex customer-facing capabilities.
• Develop managers, technical leaders, and senior contributors while maintaining organizational health, quality, reliability, observability, and operational readiness.

Requirements

• Significant experience leading software engineering teams building customer-facing products, ideally in cybersecurity or a technically complex SaaS domain.
• Experience leading multiple teams, developing managers and senior technical leaders, and building accountable, high-performing organizations.
• Experience setting portfolio strategy and delivering focused roadmaps with measurable outcomes.
• Experience scaling distributed teams and operational coverage across regions and time zones, including sustainable 24/7 practices.
• Strong technical judgment in software architecture, automation, data systems, production operations, and security-sensitive customer-facing systems.
• Experience taking complex capabilities from research, prototype, or concept through reliable production delivery and continuous improvement.
• Ability to balance innovation, speed, coverage, reliability, safety, and maintainability, and to communicate decisions and risks clearly.
• Commitment to coaching, performance feedback, inclusive leadership, accountability, and healthy team culture.
• Bachelor’s or Master’s degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience.
• Production software engineering experience with at least one modern programming language such as Python, Go, TypeScript, or a comparable language.
• Understanding of CI/CD, automated testing, observability, incident response, and operational readiness.

Nice to have

• Practical experience in vulnerability research, exploitability analysis, threat hunting, incident response, or detection engineering.
• Familiarity with SOC, threat-hunting, or incident-response workflows, security telemetry, attack techniques, and MITRE ATT&CK.
• Leadership experience in vulnerability research, exploit development, threat intelligence, threat hunting, incident response, or security product engineering.
• Experience with AI/LLM-assisted research, analysis, or security workflows, including evaluation and verification.
• Experience building follow-the-sun teams or leading global, time-sensitive operations.
• Contributions to vulnerability research, advisories, open-source tooling, technical publications, or conference talks.
• Familiarity with reverse engineering, C, C++, Rust, Assembly, cloud environments, or large-scale software products.

Culture & Benefits

• Remote-first environment with inclusive, collaborative, respectful, and psychologically safe culture.
• Health, vision, and dental insurance for employees and families, flexible vacation, and generous parental leave.
• Full-time employment with equity eligibility through stock options.
• Career development opportunities in a fast-growing cybersecurity organization.
• Remote and hybrid work models vary by role and location; some roles require regular presence at the Chicago office.

Hiring process

• Application materials may redact age-identifying information, including age, date of birth, and dates of school attendance or graduation, without penalty.