Threat Research Engineer, Security Factory: Threat Research (AI)

Location: Remote in Israel, Poland, or the United Kingdom

Poland base salary range: 272,000–408,000 PLN

Company

hirify.global is a DevSecOps orchestration platform that helps organizations improve developer productivity, operational efficiency, security, compliance, and digital transformation.

What you will do

• Research emerging attack surfaces and threat vectors, including AI coding agents, agent plugins, and package ecosystems.
• Discover and responsibly disclose vulnerabilities in open-source projects and developer tools.
• Analyze software supply-chain incidents and improve the quality and coverage of vulnerability and malware advisories.
• Build AI-powered research, analysis, and detection workflows and agents.
• Build and maintain cloud-based systems supporting detection and security advisory work.
• Publish findings, present at conferences, and participate in on-call or operational support when required by the team ownership model.

Requirements

• Hands-on security experience in research, malware analysis, penetration testing, or security tooling, combining a developer mindset with an adversarial mindset.
• Demonstrated practical use of AI, such as large language model APIs, LangChain, LangGraph, or agent SDKs.
• Strong programming skills in Go or Python, with experience in testing, code review, continuous integration and delivery, and maintainable software.
• Experience deploying and operating production services on a public cloud.
• Understanding of package ecosystems and software supply-chain attacks.
• Ability to map attack vectors, assess trade-offs, make data-driven decisions, balance quality and speed with customer outcomes, and follow security and AI industry trends.
• Clear writing skills for explaining findings to engineers and general audiences.
• Deep compiler or static application security testing engine knowledge is not required; high-level understanding is sufficient.

Nice to have

• Published vulnerability findings.
• Security research involving AI agents, large language model applications, or Model Context Protocol servers.
• Google Cloud Platform experience.
• Infrastructure-as-code experience with Terraform or OpenTofu.

Culture & Benefits

• Fully remote employment with location-based eligibility for Israel, Poland, or the United Kingdom.
• AI is used as a core productivity multiplier in daily workflows.
• Benefits supporting health, finances, and well-being, plus flexible paid time off.
• Equity compensation, an employee stock purchase plan, parental leave, and a growth and development fund.
• Team member resource groups and a culture focused on knowledge exchange, inclusion, and collaboration.