Senior Attack Engineer, Offensive Tooling

🕒 April 6

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Horizon3.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Horizon3. ai is a cybersecurity company that specializes in autonomous penetration testing through its platform, NodeZero. The company's mission is to proactively identify and address attack vectors before they can be exploited, allowing organizations to continuously assess their security posture across various environments including cloud, IoT, and on-premises systems. Founded by veterans from the US Special Operations and National Security sectors, Horizon3. ai offers a self-service SaaS solution that provides organizations with insights into their security vulnerabilities without requiring persistent or credentialed agents.

📋 Description

• Develop and maintain a multi-platform implant written in Rust (Windows, Linux, macOS; x86/x64/ARM) • Build and extend C2 server infrastructure, task dispatch, and communications protocols • Implement post-exploitation modules: credential access, process injection, privilege escalation, lateral movement • Research and implement AV/EDR evasion techniques to keep tooling operational against modern defenses • Design and build network pivoting and tunneling capabilities • Write integration tests that exercise tooling against real targets across multiple OS and architecture combinations

🎯 Requirements

• Strong proficiency in Rust, including unsafe code, FFI, async runtimes (tokio), and cross-compilation • Deep knowledge of Windows internals: Win32 API, process injection, memory manipulation, DLL loading, PE format • Experience with credential access techniques (DPAPI, LSASS, browser credential stores) • Familiarity with Linux internals: libc, process enumeration • Understanding of networking at the packet level (TCP/IP, ICMP, custom binary protocols) • Demonstrated experience building or maintaining C2 / implant software (custom or open-source) • Background in red team operations or offensive tool development • Proficiency in Python for developing and maintaining attack automation and integration • Experience developing production safe, high quality code deployed to end user machines

🏖️ Benefits

• Health, vision & dental insurance for you and your family • Flexible vacation policy • Generous parental leave • Competitive salary • Equity package in the form of stock options