Research Engineer

Arlington, VAfull timeOn Site

Apply on Employer Site

mid

$159k–$263k

H1B: no

Twenty Research Engineer at Twenty develops software tools for offensive cyber operations by researching adversary techniques and building reusable prototypes. The role involves collaborating with research, engineering, and operational teams to connect technical research to mission needs.

Responsibilities

Research adversary techniques and translate findings into practical tools, prototypes and engineering requirements.
Build reusable software for adversary emulation and attack-path analysis, with an emphasis on testing, maintainability and operational usefulness.
Develop and evaluate technical approaches, explaining their tradeoffs and limitations.
Analyze and enrich intelligence and operational datasets, including graph-based relationships, and work with data engineering to turn findings into reusable research capabilities.
Collaborate with operators and analysts to identify gaps, validate results and incorporate feedback.
Document findings and technical decisions, participate in code reviews, and contribute to reliable development practices.

Qualification

A degree in computer scienceGraph databasesReverse engineeringRelevant certifications

Required

2–5 years of relevant experience in offensive cyber, security research or software development, including building working tools.
Hands-on experience in at least one of government or military cyber operations, penetration testing or red teaming, or threat hunting and intelligence.
Proficiency in Python or Go and experience building maintainable security tooling or automation.
Experience analyzing and combining cyber or threat-intelligence datasets, using data-science techniques to test hypotheses and build useful analytical tools.
An understanding of adversary techniques, network and application security, and frameworks such as MITRE ATT&CK.
The ability to investigate unfamiliar problems, test hypotheses and communicate both evidence and limitations.
The ability to explain technical findings to engineers, analysts and operators.
A degree in computer science, software engineering or cybersecurity, or equivalent practical experience.
U.S. citizenship is required. An active security clearance is not required.

Preferred

Experience in Digital Network Exploitation Analysis or Exploitation Analysis.
Tools or research adopted by operational users.
Custom security tooling or adversary-emulation platforms.
Graph databases, graph queries or multi-source intelligence analysis.
Reverse engineering, vulnerability research, malware analysis or exploit development.
Applying AI or machine learning to security research.
Relevant certifications, published research, open-source contributions or technical talks.

Benefits

Dental
Vision
401(k)
PTO
Parental Leave
Life Insurance

Company

Twenty

View company page

Source: ashby

Active within the past hour

More roles at Twenty

Senior Recruiter, G&A

New York, NY

Offensive Solutions Architect

Arlington, VA

Staff Product Manager - AI Evals

Arlington, VA

Staff / Principal Technical Program Manager

Arlington, VA