Threat Researcher (Cybersecurity)

Location: Taipei, Taiwan

Company

hirify.global is a global cybersecurity software company developing technologies that protect connected systems and enterprise environments.

What you will do

• Perform red teaming and penetration testing against customer enterprise environments, including cloud applications and infrastructure.
• Simulate real-world adversaries and research offensive techniques, evasion methods, and attacker tools.
• Develop scripts, custom tools, and methodologies to improve and automate red team operations.
• Design and test security technologies, automations, and controls.
• Document findings and communicate risks and remediation recommendations to engineering and management teams.

Requirements

• Solid understanding of computer hardware, software, networks, and communications.
• Hands-on experience with Linux/Unix and Windows operating systems, web technologies, SaaS, cloud environments, wireless security, and mobile device security.
• Experience conducting full-scope assessments and penetration tests, including phishing, social engineering, server- and client-side attacks, protocol subversion, and network or web application exploitation.
• Proficiency with scanning, attack, and assessment tools, including at least one C2 framework.
• In-depth knowledge of vulnerabilities such as RCE, SQL injection, SSRF, LFI/path traversal, XXE, insecure deserialization, SSTI, and authentication or authorization flaws.
• Experience modifying exploits or proof-of-concept code, writing technical reports, and working independently and collaboratively.

Nice to have

• 2+ years of experience in red teaming or penetration testing.
• Hands-on offensive security certifications such as OSCP/OSCP+, OSWE, or OSEP.
• Experience developing custom offensive tooling or automation.
• Experience evading EDR or SOC detection in mature, monitored environments.
• Strong written and verbal communication skills in English.

Culture & Benefits

• Full-time employment based in Taipei.
• Work within a global services and cyber threat red team organization.
• Engage in authorized, ethical attack simulations that strengthen customer security resilience.