Offensive Cyber Research Engineer

The role

You will lead the development of sophisticated offensive cyber capabilities and attack path frameworks. You will mentor engineers, conduct advanced research into adversary techniques, and architect scalable frameworks for automation.

What you will do

• Lead the architecture and design of sophisticated attack path frameworks
• Establish technical standards and best practices for offensive cyber tool development
• Evaluate and recommend engineering courses of action for new offensive capabilities
• Conduct advanced research into emerging adversary techniques and zero-day exploitation
• Develop proof-of-concept tools and techniques
• Mentor and provide technical guidance to offensive cyber engineers and researchers
• Design and implement advanced attack paths that emulate adversary campaigns
• Create reusable, production-grade components for complex attack techniques
• Lead the design of ETL pipelines for processing threat intelligence and operational data
• Work closely with government customers to understand mission requirements

Required qualifications

• 6-8 years of threat research, offensive cyber operations, and software development experience
• Expert-level operational cyber security experience in DNEA, EA operations, advanced penetration testing, or threat intelligence analysis
• Demonstrated technical leadership experience mentoring offensive cyber engineers
• Deep expertise in the MITRE ATT&CK framework
• Expert-level experience operating and extending threat emulation platforms like Cobalt Strike or Metasploit
• Extensive experience integrating and analyzing diverse threat intelligence sources
• Advanced proficiency in implementing persistence mechanisms, defense evasion, and counter-forensics
• Expert containerization and orchestration experience using Docker and Kubernetes
• Advanced programming and software architecture skills in Python and Golang
• Expert-level experience writing complex graph queries using Neo4j or similar
• Comprehensive knowledge of network security, application security, secure coding, cryptography, and security architecture
• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or related field

Nice to have

• Master's degree
• Previous technical leadership experience in government cyber operations units or intelligence organizations
• Experience leading offensive cyber capability development programs or research initiatives
• Track record of developing novel offensive techniques or tools adopted by operational units
• Advanced certifications such as OSCP, OSCE, OSEE, GXPN, or government-recognized credentials
• Experience with AI/ML integration in offensive cyber operations
• Extensive background in malware analysis, reverse engineering, exploit development, or vulnerability research
• Experience with multi-domain intelligence analysis
• Publications or conference presentations on offensive cyber research
• Contributions to open-source offensive security tools or frameworks

Benefits

• Health, medical, dental, and vision plan options
• Life / AD&D, disability coverage options
• Paid parental leave: 12 weeks for birthing parents, 4 weeks for non-birthing parents, 6 weeks for adoptive, foster, or intended parents
• Paid holidays and flexible PTO
• 401(k) with pre-tax and Roth options
• HSA/FSA options
• Dependent care FSA

Before you apply

• Role is limited to U.S. citizens
• Must have an active TS/SCI with CI Polygraph

About the company

Founded in 2024, Twenty Technologies industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from various investors.