Senior Phishing Tradecraft Researcher

Huntress
United States
Remote

Who this role is best for

A natural match if you have hands-on experience with phishing simulations and AI tooling. This remote role in cybersecurity emphasizes technical precision and collaboration with product teams across multiple domains.

Best fit for

  • Candidates with hands-on phishing simulation experience and AI tooling proficiency
    — “Proficiency with Claude Code, Codex, or Cursor with impressive projects to prove it”
  • Individuals who thrive in creating highly realistic phishing content with HTML, CSS, and JavaScript
    — “Comfortable scripting and coding to build proofs-of-concept and tooling with a keen eye for creating pixel-perfect simulated phishing emails & landing pages using HTML, CSS, JavaScript, & React”
  • Candidates with a background in analyzing phishing trends and social engineering tactics
    — “Experience identifying emerging tradecraft”

Things to consider

  • Requires a high level of attention to detail and urgency in delivering under tight deadlines
    — “Proven organizational and project management skills, with a keen attention to detail and sense of urgency to deliver an exceptional product under tight deadline pressures”
  • The role demands a strong ability to translate technical and non-technical insights into training outcomes
    — “Passion to translate your expertise in technical & nontechnical ways to deliver impactful security outcomes that protect the 99%”

How to stand out

  • Highlight specific examples of phishing simulations you've created that were indistinguishable from real attacks
    — “Craft a growing library of common indicators and write new ones when a scenario calls for it”
  • Emphasize your ability to automate phishing content generation using AI tools
    — “Automate by default, evolving + expanding phishing content generation as an AI-powered system using Claude Code”
  • Showcase your experience in triaging phishing incidents and identifying attack trends
    — “Triage reported phishing emails, internal and external security incidents surfacing threat insights and trend analysis”
  • Demonstrate your ability to align with leadership and deliver unified training outcomes
    — “Align with the Principal Researcher to deliver unified Security Awareness Training and phishing program outcomes”
Pace · Fast PacedCollaboration · MediumAutonomy · HighDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Designing and building phishing scenario emails & landing pages
Typical background
Experience managing, deploying, and securing SMB environments

Skills & requirements

Required

Security Awareness TrainingPhishing SimulationSocial EngineeringPsychologyEducationSecurity SoftwareAutomation ToolsHTMLCSSJavaScriptReactProduct ManagementIncident ResponseManaged Service Provider Tools

Preferred

SMB Environment SecuritySecurity Best Practices

Stack & domain

Security Awareness TrainingPhishing Scenario EmailsLanding PagesScriptingCodingHTMLCSSJavaScriptReactSocial EngineeringPsychologyEducationManaged Service Provider ToolsProduct ManagementIncident ResponseSecurity SoftwareBest PracticesAutomation ToolsLeadershipProblem-solvingCommunicationTeamworkCreativityCybersecurityPhishing

About the role

Original posting from Huntress via Greenhouse

What We Do:

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.

Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.

Reports to: Manager, Product Research

Location: Remote US

Compensation Range: $170,000.00 to $185,000.00  base plus bonus and equity

What You’ll Do: 

Do you like getting into the weeds on all things technical, psychological, and educational, and have a desire to know how things work? Then this is the position for you. We are looking for that Swiss Army Knife that brings broad experience to each challenge presented. The Huntress Product team has the unique honor of waking up every morning knowing we’re going to make hackers regret targeting our partners and customers. As a Senior Product Researcher for our Security Awareness Training product, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions that are disproportionately effective at countering these constantly evolving threats. One should have experience managing, deploying, and securing SMB environments utilizing a wide variety of security software, best practices, and automation tools. Familiarity with product management, incident response, social engineering, psychology, education, and managed service provider tools is an additional way to differentiate yourself.

Responsibilities: 

Operate a proven industry-leading Security Awareness Training phishing program. 

Be the security expert designing and building phishing scenario emails & landing pages that simulate real cyber attacks for thousands of SAT learners. Every simulation is paired with coaching that shows learners the social engineering tells, how the learner can develop skills to identify social engineering tradecraft, the indicators, like hovering a link before clicking or receiving an unexpected email. Craft a growing library of common indicators and write new ones when a scenario calls for it.

Comfortable scripting and coding to build proofs-of-concept and tooling with a keen eye for creating pixel-perfect simulated phishing emails & landing pages using HTML, CSS, JavaScript, & React. Take pride in delivering simulations impossible to distinguish from real tradecraft. The details are the job.

Identify emerging social engineering tradecraft from attack patterns, email metadata, and web expertise. Today ClickFix attacks and variants dominate the threat landscape, but relentless hunger to get ahead of attacker tradecraft will mean translating the shifts in attacker tactics that matter into what the program teaches. Evolve deliverables with the tradecraft.

Automate by default, evolving + expanding phishing content generation as an AI-powered system using Claude Code.

Expand the program into new regions, more languages, more tailored content, and new kinds of learning experiences with the guidance of the Product Manager and Principal Product Researcher.

Triage reported phishing emails, internal and external security incidents surfacing threat insights and trend analysis in the Huntress Threat Report, threat advisories, social media engagements, webinars & conference talks, resulting in strategic security awareness outreach campaigns.

Align with the Principal Researcher to deliver unified Security Awareness Training and phishing program outcomes.

Proven organizational and project management skills, with a keen attention to detail and sense of urgency to deliver an exceptional product under tight deadline pressures.

Eagerness to engage, report, and be accountable to executive stakeholders.

Passion to translate your expertise in technical & nontechnical ways to deliver impactful security outcomes that protect the 99%.

What You Bring To The Team: 

Proficiency with HTML, CSS, Javascript & React, Angular, or Vue

Proficiency with Claude Code, Codex, or Cursor with impressive projects to prove it

Experience in manually building phishing simulation deliverables like emails and landing pages, simulating phishing attacks, then analyzing & reporting simulation results

Experience triaging reported phishing emails, security incidents, and identifying trends + patterns

Experience in analyzing, tracking, and defending against phishing attacks

Experience identifying emerging tradecraft

Social engineering experience, coursework, training, certifications

Experience innovating training content

Experience with eLearning design and development

Experience developing marketing content for social media, YouTube, blogs & reports

Spanish language skills desired, but not required

What We Offer: 

100% remote work environment - since our founding in 2015

Generous paid time off policy, including vacation, sick time, and paid holidays

12 weeks of paid parental leave

Highly competitive and comprehensive medical, dental, and vision benefits plans 

401(k) with a 5% contribution regardless of employee contribution

Life and Disability insurance plans

Stock options for all full-time employees 

One-time $500 reimbursement for building/upgrading home office

Annual allowance for education and professional development assistance 

$75 USD/month digital reimbursement

Access to the BetterUp platform for coaching, personal, and professional growth

Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. 

We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.  

We do discriminate against hackers who try to exploit businesses of all sizes.

Accommodations: 

If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com. Please note that non-accommodation requests to this inbox will not receive a response. 

Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights.

#BI-Remote 

Source: Huntress careers (Greenhouse)

Similar roles