Twenty

Research Engineer

Twenty
Apply
12 hours ago
Arlington, VA, USA or New York, NY, USAMid Level / Senior

Base Salary

$159k - $263k/yr

Responsibilities

  • Research adversary techniques and translate findings into practical tools, prototypes, and engineering requirements.
  • Build reusable software for adversary emulation and attack-path analysis.
  • Develop and evaluate technical approaches while explaining tradeoffs and limitations.
  • Analyze and enrich cyber and threat-intelligence datasets, including graph-based relationships.
  • Collaborate with operators, analysts, research teams, and engineering teams to validate results and address capability gaps.
  • Document findings and technical decisions, participate in code reviews, and support reliable development practices.

Requirements

  • 2–5 years of relevant experience in offensive cyber, security research, or software development, including building working tools.
  • Hands-on experience in government or military cyber operations, penetration testing or red teaming, or threat hunting and intelligence.
  • Proficiency in Python or Go and experience building maintainable security tooling or automation.
  • Experience analyzing and combining cyber or threat-intelligence datasets using data-science techniques.
  • Understanding of adversary techniques, network and application security, and frameworks such as MITRE ATT&CK.
  • Ability to investigate unfamiliar problems, test hypotheses, and communicate evidence and limitations.
  • Ability to explain technical findings to engineers, analysts, and operators.
  • Degree in computer science, software engineering, or cybersecurity, or equivalent practical experience.
  • U.S. citizenship is required; an active security clearance is not required.
  • Preferred experience includes digital network exploitation analysis, operationally adopted tools, custom security tooling, graph databases or graph queries, reverse engineering, vulnerability research, malware analysis, exploit development, AI or machine learning applied to security research, certifications, published research, open-source contributions, or technical talks.

Benefits

  • Medical, dental, vision, life, AD&D, and disability plan options.
  • Paid parental leave for eligible full-time employees, including 12 weeks for birthing parents, 4 weeks for non-birthing parents, and 6 weeks for adoptive, foster, or intended parents through surrogacy.
  • Paid holidays and flexible PTO.
  • 401(k) with pre-tax and Roth options, HSA/FSA options, and dependent care FSA.
  • Onsite, full-time role in Arlington, Virginia; benefits vary by location, role, and eligibility.

Tech Stack

Categories

Twenty

About Twenty

51-200 employees
Contact me