Senior Attack Engineer, Internal Systems

🕒 vor 14 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $206.278 - $242.680 / Jahr

⏰ Vollzeit

🟠 Senior

👷🏻‍♀️ Ingenieur

👻 Geisterscore 20%

Was es bedeutet: die Wahrscheinlichkeit, dass für diese Stelle niemand wirklich einstellt.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Warum dieser Wert:

• Seit 15 Tagen offen.
• Stellen bei diesem Unternehmen werden meist in 39 Tagen besetzt.
• 180 offene Stellen bei 110 Mitarbeitenden.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

Horizon3.ai

WebsiteLinkedInAlle Stellen

51 - 200 Mitarbeiter

Gegründet 2019

🔒 Cybersecurity

🤖 Künstliche Intelligenz

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Die NodeZero™-Plattform befähigt Ihr Unternehmen, Ihre ausnutzbare Angriffsfläche kontinuierlich zu identifizieren, zu beheben und die Wirksamkeit der Maßnahmen zu verifizieren. Reduzieren Sie Ihr Sicherheitsrisiko, indem Sie Schwachstellen in Ihrem Netzwerk autonom finden, wissen, wie Sie sie priorisieren und beheben, und umgehend verifizieren, dass Ihre Maßnahmen wirken. NodeZero liefert produktionssichere, autonome Penetrationstests sowie weitere zentrale Assessments, die über Ihre größten internen, externen, Cloud- und Hybrid-Cloud-Umgebungen skalieren. Keine Agents erforderlich, kein Code zu schreiben, keine Berater zu beauftragen.

Beschreibung

• Research and develop novel attack capabilities for integration into the NodeZero autonomous pentesting platform • Research emerging internal tradecraft and convert it into production attack content • Design, build, and maintain production-grade Python systems • Balance attack effectiveness, operational safety, reliability, scalability, and maintainability • Acquire, configure, and exploit hardened internal test environments • Monitor vulnerability databases and threat intelligence sources • Extend platform architecture and graph data models for identity, privilege-escalation, and lateral-movement paths • Shape coverage priorities using customer needs, threat intelligence, and emerging techniques • Scope deliverable projects and proactively raise risks and tradeoffs • Mentor teammates and improve processes, code quality, architectural standards, and research safety practices • Partner with engineers, product managers, and customer-facing teams to resolve issues, enhance features, author documentation, and drive customer value • Independently lead complex internal network and Active Directory attack projects from research and technical design through production delivery and ongoing operation

🎯 Anforderungen

• Deep, hands-on offensive security experience against internal enterprise networks and Active Directory, from initial foothold through domain and enterprise compromise • Expert-level proficiency in Python and a track record of shipping and maintaining tested, documented, production-quality code • Strong command of network protocol exploitation, privilege escalation, lateral movement, and credential access • Experience with object-oriented design, API integration, data structures, and scalable system components • Experience designing complex software components or systems with extensibility, operational safety, performance, and long-term maintenance considerations • Track record of independently leading complex, high-impact technical projects and making sound decisions under ambiguity • Strong written and verbal communication, technical documentation, and ability to explain design choices, risks, and tradeoffs • Experience mentoring teammates and improving team processes, tooling, or technical standards • Offensive security and software engineering background with passion for turning security research into product capabilities • OSCP, OSEP, CRTO, or equivalent offensive certifications preferred • Experience with SCCM, Windows Admin Center, Docker, Kubernetes, Postgres, Neo4j, BloodHound, Impacket, or netexec preferred • Experience with graph databases and attack-path analysis preferred • Experience integrating security research into production multi-tenant SaaS preferred • Public contributions such as open-source tools, technical blog posts, conference talks, or published CVEs preferred • Experience building production-safe autonomous or automated offensive tooling, including AI/LLM applications, preferred • Legally authorized to work in the United States

🏖️ Vorteile

• Equity package in the form of stock options for all full-time roles • Health, vision & dental insurance for you and your family • Flexible vacation policy • Generous parental leave • Career development opportunities • Collaborative environment encouraging creativity and out-of-the-box thinking • Remote and hybrid work models depending on role and location • Inclusive culture • Up to 10% travel

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen