SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 170,000 - 185,000 / annual
Huntress, founded in 2015 by former NSA cyber operators, is a remote-first cybersecurity company protecting over 5M endpoints and 16M identities worldwide. The company delivers enterprise-grade security to businesses of all sizes through a combination of in-house technology and a 24/7 human-led Security Operations Center.
As Senior Phishing Tradecraft Researcher, you will own the design, development, and evolution of Huntress's Security Awareness Training phishing simulation program. You'll be the security expert crafting realistic phishing scenario emails and landing pages that teach thousands of learners to identify social engineering tactics. Your work involves building pixel-perfect simulated attacks using HTML, CSS, JavaScript, and React—so convincing they're indistinguishable from real threats.
Key responsibilities include:
- Designing and building phishing simulation emails and landing pages that mirror real-world attack tradecraft
- Creating and maintaining a library of social engineering indicators and teaching materials that help learners recognize attack patterns
- Identifying emerging social engineering tactics from attack patterns and threat intelligence, then translating those shifts into program content (e.g., ClickFix variants)
- Writing code and building proofs-of-concept to automate phishing content generation using AI tools like Claude Code
- Triaging reported phishing emails and security incidents to surface threat insights for the Huntress Threat Report and public security awareness campaigns
- Expanding the program into new regions, languages, and learning formats in collaboration with the Product Manager and Principal Product Researcher
- Managing projects with attention to detail and urgency under deadline pressure
- Engaging with executive stakeholders and translating technical expertise into impactful security outcomes
You'll report to the Manager, Product Research and work alongside a Principal Product Researcher to deliver unified outcomes.
REQUIREMENTS:
- Proficiency with HTML, CSS, JavaScript, and at least one modern framework (React, Angular, or Vue)
- Proficiency with Claude Code, Codex, or Cursor, with impressive projects to demonstrate capability
- Hands-on experience manually building phishing simulation deliverables (emails and landing pages)
- Experience triaging reported phishing emails, analyzing security incidents, and identifying trends and patterns
- Experience analyzing, tracking, and defending against phishing attacks
- Experience identifying emerging social engineering tradecraft
- Social engineering experience, coursework, training, or certifications
- Experience innovating training content and eLearning design/development
- Experience developing marketing content for social media, YouTube, blogs, and reports
- Spanish language skills desired but not required
