Senior Phishing Tradecraft Researcher

Role overview

This job description has been rewritten in fresh language using the facts in the listing. Source credit and original listing details are available below.

Huntress is hiring a full-time Senior Phishing Tradecraft Researcher for its Security Awareness Training product team. This is a remote role based in the United States, reporting to the Manager, Product Research. The listed base salary is $170,000–$185,000 per year, plus bonus and equity.

The role focuses on operating and advancing a phishing simulation program: creating realistic scenarios and accompanying learner coaching, tracking changes in social-engineering tactics, and expanding training content and experiences. The researcher will also help automate content creation with AI tools and contribute threat findings through reports, advisories, and other outreach. The position calls for technical implementation alongside clear communication for technical and nontechnical audiences.

Huntress lists paid time off and holidays, 12 weeks of paid parental leave, medical, dental, and vision coverage, life and disability insurance, and a 401(k) contribution of 5% regardless of employee contribution. Other listed offerings include stock options for full-time employees, a one-time $500 home-office reimbursement, an annual education and professional-development allowance, a $75 monthly digital reimbursement, and access to BetterUp. Huntress says AI tools assist with application review, while human recruiters remain involved and make final hiring decisions. Accommodation requests for the selection process can be sent to [email protected].

Role at a glance: Remote U.S. full-time role developing realistic phishing simulations and security awareness training, with a $170,000–$185,000 base salary plus bonus and equity.

Responsibilities mentioned in the listing

• Run and improve Huntress’s Security Awareness Training phishing program.
• Design realistic phishing emails and landing pages, and pair simulations with coaching on social-engineering indicators and detection skills.
• Use HTML, CSS, JavaScript, and React to build simulations, proofs of concept, and tools.
• Monitor attack patterns, email metadata, and web activity to identify emerging social-engineering tactics and update training accordingly.
• Expand and automate phishing content generation as an AI-powered system using Claude Code.
• Develop the program for additional regions and languages, tailored content, and new learning formats in collaboration with the Product Manager and Principal Product Researcher.
• Triage reported phishing emails and security incidents, identify trends, and share threat insights through reports, advisories, social media, webinars, conference talks, and security awareness campaigns.

Qualifications stated in the listing

• Proficiency in HTML, CSS, and JavaScript, plus React, Angular, or Vue.
• Proficiency with Claude Code, Codex, or Cursor, demonstrated through projects.
• Experience creating phishing simulation emails and landing pages, conducting simulations, and analyzing and reporting results.
• Experience triaging reported phishing emails and security incidents and recognizing trends and patterns.
• Experience analyzing, tracking, and defending against phishing attacks, and identifying emerging tradecraft.
• Experience with social engineering through work, coursework, training, or certifications.
• Experience developing training content and e-learning.
• Experience creating marketing content for social media, YouTube, blogs, or reports.