Senior Phishing Tradecraft Researcher

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage a leading industry-standard Security Awareness Training phishing initiative.

• Develop and construct phishing scenario emails and landing pages that replicate actual cyber threats for SAT participants.

• Provide training that educates participants on recognizing social engineering tactics and phishing signals.

• Create a growing repository of common phishing signals and develop new indicators for various scenarios.

• Script and create proofs-of-concept and tools using HTML, CSS, JavaScript, and React.

• Design meticulously crafted simulated phishing emails and landing pages.

• Identify new social engineering tactics based on attack patterns, email metadata, and web knowledge.

• Adapt training materials and program outputs in response to changes in attacker strategies.

• Automate and enhance phishing content generation using AI-driven systems with Claude Code.

• Extend the program into additional regions, languages, customized content, and learning experiences.

• Assess reported phishing emails and manage both internal and external security incidents.

• Provide threat insights and trend analysis through threat reports, advisories, social media, webinars, and conference presentations.

• Implement strategic security awareness outreach initiatives.

• Collaborate with the Principal Researcher to ensure cohesive Security Awareness Training and phishing program results.

• Communicate, report, and maintain accountability to executive stakeholders.

⛳️ Requirements

• Expertise in HTML, CSS, JavaScript, along with React, Angular, or Vue.

• Proficiency in Claude Code, Codex, or Cursor with notable projects to demonstrate capability.

• Background in manually constructing phishing simulation materials, such as emails and landing pages, simulating phishing attempts, and subsequently analyzing and reporting on results.

• Experience in assessing reported phishing emails, security incidents, and recognizing trends and patterns.

• Knowledge in analyzing, tracking, and defending against phishing threats.

• Proven ability to recognize emerging tactics.

• Experience in social engineering through coursework, training, or certifications.

• Proven track record of innovating training content.

• Background in eLearning design and development.

• Experience in crafting marketing content for social media, YouTube, blogs, and reports.

• Spanish language proficiency is a plus, but not mandatory.

• Familiarity with managing, deploying, and securing SMB environments utilizing a variety of security software, best practices, and automation tools.

• Knowledge of product management, incident response, psychology, education, and managed service provider tools.

• Demonstrated organizational and project management abilities.

• Strong attention to detail and a sense of urgency.

• Willingness to engage, report, and be accountable to executive stakeholders.

• Capability to convert technical and non-technical expertise into meaningful security results.

🏝️ Benefits

• Fully remote work environment.

• Generous paid time off policy, encompassing vacation, sick leave, and paid holidays.

• 12 weeks of paid parental leave.

• Highly competitive and comprehensive medical, dental, and vision benefits.

• 401(k) plan with a 5% contribution regardless of employee input.

• Life and Disability insurance options.

• Stock options available for all full-time employees.

• One-time $500 reimbursement for establishing or upgrading a home office.

• Annual provision for education and professional development support.

• $75 USD/month for digital expenses.

• Access to the BetterUp platform for coaching, personal development, and professional growth.