Research Engineer

The role

You will investigate emerging techniques and build research prototypes. You will develop reusable tools for adversary emulation and attack-path analysis to help operators.

What you will do

• Research adversary techniques and translate findings into practical tools, prototypes and engineering requirements.
• Build reusable software for adversary emulation and attack-path analysis.
• Develop and evaluate technical approaches, explaining their tradeoffs and limitations.
• Analyze and enrich intelligence and operational datasets.
• Collaborate with operators and analysts to identify gaps and validate results.
• Document findings and technical decisions.
• Participate in code reviews.
• Contribute to reliable development practices.

Required qualifications

• 2–5 years of relevant experience in offensive cyber, security research or software development, including building working tools.
• Hands-on experience in at least one of government or military cyber operations, penetration testing or red teaming, or threat hunting and intelligence.
• Proficiency in Python or Go and experience building maintainable security tooling or automation.
• Experience analyzing and combining cyber or threat-intelligence datasets, using data-science techniques to test hypotheses and build useful analytical tools.
• An understanding of adversary techniques, network and application security, and frameworks such as MITRE ATT&CK.
• The ability to investigate unfamiliar problems, test hypotheses and communicate both evidence and limitations.
• The ability to explain technical findings to engineers, analysts and operators.
• A degree in computer science, software engineering or cybersecurity, or equivalent practical experience.
• U.S. citizenship is required.

Nice to have

• Experience in Digital Network Exploitation Analysis or Exploitation Analysis.
• Experience developing tools or producing research adopted by operational users.
• Experience with custom security tooling or adversary-emulation platforms.
• Experience with graph databases, graph queries, or multi-source intelligence analysis.
• Experience in reverse engineering, vulnerability research, malware analysis, or exploit development.
• Experience applying AI or machine learning to security research.
• Relevant certifications or contributions through published research, open-source projects, or technical talks.

Benefits

• Medical, dental, and vision plan options.
• Life / AD&D, disability coverage options.
• Paid parental leave for eligible full-time employees.
• 12 weeks for birthing parents, 4 for non-birthing parents, 6 weeks for adoptive, foster, or intended parents through surrogacy.
• Paid holidays and flexible PTO.
• 401(k) with pre-tax and Roth options.
• HSA/FSA options, dependent care FSA.

Before you apply

• U.S. citizenship is required.
• Role is limited to U.S. citizens due to U.S. government contract and security requirements.

About the company

Twenty Technologies industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, the company was founded in 2024.