[Hiring] Senior Phishing Tradecraft Researcher @Huntress

Role Description

Do you like getting into the weeds on all things technical, psychological, and educational, and have a desire to know how things work? Then this is the position for you. We are looking for that Swiss Army Knife that brings broad experience to each challenge presented. The Huntress Product team has the unique honor of waking up every morning knowing we’re going to make hackers regret targeting our partners and customers. As a Senior Product Researcher for our Security Awareness Training product, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions that are disproportionately effective at countering these constantly evolving threats.

• Operate a proven industry-leading Security Awareness Training phishing program.
• Be the security expert designing and building phishing scenario emails & landing pages that simulate real cyber attacks for thousands of SAT learners.
• Craft a growing library of common indicators and write new ones when a scenario calls for it.
• Comfortable scripting and coding to build proofs-of-concept and tooling with a keen eye for creating pixel-perfect simulated phishing emails & landing pages using HTML, CSS, JavaScript, & React.
• Identify emerging social engineering tradecraft from attack patterns, email metadata, and web expertise.
• Automate by default, evolving + expanding phishing content generation as an AI-powered system using Claude Code.
• Expand the program into new regions, more languages, more tailored content, and new kinds of learning experiences.
• Triage reported phishing emails, internal and external security incidents surfacing threat insights and trend analysis.
• Align with the Principal Researcher to deliver unified Security Awareness Training and phishing program outcomes.
• Proven organizational and project management skills, with a keen attention to detail and sense of urgency to deliver an exceptional product under tight deadline pressures.
• Eagerness to engage, report, and be accountable to executive stakeholders.
• Passion to translate your expertise in technical & nontechnical ways to deliver impactful security outcomes that protect the 99%.

Qualifications

• Proficiency with HTML, CSS, Javascript & React, Angular, or Vue.
• Proficiency with Claude Code, Codex, or Cursor with impressive projects to prove it.
• Experience in manually building phishing simulation deliverables like emails and landing pages.
• Experience triaging reported phishing emails, security incidents, and identifying trends + patterns.
• Experience in analyzing, tracking, and defending against phishing attacks.
• Experience identifying emerging tradecraft.
• Social engineering experience, coursework, training, certifications.
• Experience innovating training content.
• Experience with eLearning design and development.
• Experience developing marketing content for social media, YouTube, blogs & reports.
• Spanish language skills desired, but not required.

Benefits

• 100% remote work environment - since our founding in 2015.
• Generous paid time off policy, including vacation, sick time, and paid holidays.
• 12 weeks of paid parental leave.
• Highly competitive and comprehensive medical, dental, and vision benefits plans.
• 401(k) with a 5% contribution regardless of employee contribution.
• Life and Disability insurance plans.
• Stock options for all full-time employees.
• One-time $500 reimbursement for building/upgrading home office.
• Annual allowance for education and professional development assistance.
• $75 USD/month digital reimbursement.
• Access to the BetterUp platform for coaching, personal, and professional growth.