Skip to content

Open nowPosted 326 days ago

Principal Offensive Cyber Research Engineer — Twenty

Accel portfolio7,376 open roles

Where
Arlington, VA, USA
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal Offensive Cyber Research Engineer — TwentyAccel portfolio · Arlington, VA, USA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Accel portfolio's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.5% of postings close within 7 days. Measured by our own scanner across the market. Accel portfolio postings stay open a median of 28 days.

Share of postings closed within
  1. 1.8%1 day
  2. 4.0%3 days
  3. 8.5%7 days
  4. 15.4%14 days
  5. 34.1%30 days
This job: posted 326 days ago

Accel portfolio median: 28 days open

The posting

About the Company

America is under sustained cyber attack. Our adversaries infiltrate our networks, steal our IP, and degrade the digital infrastructure that modern life runs on. They’ve learned—correctly—that those attacks rarely produce consequences.

Twenty was founded to change that, by making our adversaries think twice before they attack us. Our vision is American and allied primacy in cyberspace—a future where they cannot contest us, deterrence is assured, and the free world remains secure.

Founded in 2024, Twenty Technologies (www.twenty.io) industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from Khosla Ventures, Accel, Caffeinated Capital, Friends & Family Capital, Point72 Ventures, General Catalyst, and In-Q-Tel.

Mission | On Site | Full Time | Active TS/SCI with CI Polygraph

Role Summary

You will serve as the preeminent technical authority for Twenty’s offensive cyber research program—setting the long-term vision, raising the bar on technical execution, and driving breakthroughs in adversary emulation and attack automation. Your work will shape how we build and standardize offensive capabilities that support real-world national security outcomes. You’ll partner closely with engineering, product, and operations leaders, and you’ll regularly advise executive leadership and government stakeholders on strategy, technical risk, and capability evolution.

What You’ll Do

  • Define and drive the long-term technical vision and roadmap for Twenty’s offensive cyber research and capabilities.
  • Serve as the principal technical advisor to executive leadership on strategy, capability development, and technical risk.
  • Lead groundbreaking research into advanced adversary behaviors and next-generation offensive cyber techniques.
  • Establish company-wide standards, frameworks, and best practices for offensive tooling and engineering quality.
  • Architect and guide development of advanced adversary emulation and attack automation systems built for scale.
  • Lead technical governance (e.g., architecture reviews) and provide authoritative guidance on complex decisions.
  • Mentor Staff and Senior engineers, build growth plans, and strengthen the organization’s technical leadership bench.
  • Recruit, interview, and assess top-tier offensive cyber talent to build and sustain world-class teams.
  • Lead technical engagements with senior government stakeholders—translating complex capabilities into decision-grade clarity.
  • Build strategic research partnerships across government, academia, and industry to accelerate innovation and impact.

Who You Are

  • You’re motivated by mission-driven work that helps defend democracies in the cyber domain.
  • You set a high technical bar and raise it—through clear standards, strong reviews, and hands-on mentorship.
  • You’re calm under pressure and comfortable making high-stakes decisions with incomplete information.
  • You think in systems: tradeoffs, second-order effects, operational constraints, and long-term maintainability.
  • You have the presence to influence executives and senior government stakeholders without overselling.
  • You balance innovation with operational discipline—prioritizing safety, rigor, and responsible stewardship.
  • You communicate with precision: crisp written artifacts, clear technical narratives, and direct feedback.

Must Have

  • You have 8–12 years of distinguished experience across offensive cyber operations, advanced research, and software development.
  • You have served in senior technical leadership roles in one or more of: government/military DNEA, Exploitation Analyst (EA) operations, elite red teams, or nation-state threat research.
  • You have defined technical strategy and led large-scale initiatives that shipped durable, high-impact capabilities.
  • You have expert-level understanding of adversary behaviors and TTPs, including deep familiarity with MITRE ATT&CK.
  • You have demonstrated technical judgment in designing complex, scalable systems and establishing engineering standards.
  • You have led and mentored senior engineers, including setting expectations, running technical reviews, and developing talent.
  • You have strong executive and customer communication skills, with experience briefing senior leaders and shaping decisions.
  • You are eligible to obtain a U.S. Government security clearance.

Nice to Have

  • You have deployed offensive cyber capabilities into operational use with measurable mission impact.
  • You have a track record of thought leadership through publications, conference talks, or widely respected technical writing.
  • You have deep background in malware development, vulnerability research, or exploit engineering with notable discoveries.
  • You hold advanced technical certifications (e.g., OSEE, GXPN, or equivalent government credentials).
  • You have experience with multi-source intelligence fusion or cross-domain operational environments.
  • You have familiarity with acquisition/requirements processes and guiding capability development across multiple teams.

Tech Environment (You Might Work With)

  • You might work with modern systems programming and scripting languages (e.g., C/C++, Rust, Python).
  • You might work with cloud environments and cloud security across major providers (AWS, Azure, GCP).
  • You might work with graph-based analysis and large-scale data processing systems.
  • You might work with AI/ML workflows applied to adversary emulation and automation.
  • You might work with containerized infrastructure, CI/CD, and production-grade observability.

Security / Work Environment

This role requires eligibility to obtain a U.S. Government security clearance. Some work may involve operating in a controlled environment.

Benefits What's on the table:

  • Health. Medical, dental, and vision plan options. Life / AD&D, disability coverage options.
  • Family. Paid parental leave for eligible full-time employees. 12 weeks for birthing parents, 4 for non-birthing parents, 6 weeks for adoptive, foster, or intended parents through surrogacy.
  • Vacation. Paid holidays and flexible PTO. Take what you need.
  • Retirement. 401(k) with pre-tax and Roth options. HSA/FSA options, dependent care FSA.

Benefits vary by location, role, and eligibility. Full plan details provided during the interview and offer process.

If this role sounds like you, apply and share with us your interest

Due to U.S. government contract and security requirements, this role is limited to U.S. citizens. Some positions may also require eligibility to obtain and maintain a U.S. Government security clearance. Any active clearance requirement will be listed in the role description.

Twenty is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability, or any other protected status, consistent with applicable law.

If you need a reasonable accommodation during the hiring process, let us know and we will work with you.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Accel portfolio's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Accel portfolio's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Accel portfolio's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.