Senior Attack Engineer, GCP

Job not on LinkedIn

🔥 5 minutes ago

🇺🇸 United States – Remote

💵 $206.3k - $242.7k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 20%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Horizon3.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Horizon3. ai is a cybersecurity company that specializes in autonomous penetration testing through its platform, NodeZero. The company's mission is to proactively identify and address attack vectors before they can be exploited, allowing organizations to continuously assess their security posture across various environments including cloud, IoT, and on-premises systems. Founded by veterans from the US Special Operations and National Security sectors, Horizon3. ai offers a self-service SaaS solution that provides organizations with insights into their security vulnerabilities without requiring persistent or credentialed agents.

📋 Description

• Research GCP attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques • Design, implement, and validate production-quality Python attack capabilities across GCP IAM, service accounts, workload identities, compute, Kubernetes/GKE, storage, databases, secrets, networking, and other cloud-native services • Chain individual weaknesses into realistic attack paths with reliable proof of exploitability and actionable customer outcomes • Set technical direction for GCP attack coverage and prioritize work with Product and Engineering • Translate research and customer needs into a sequenced roadmap • Build and maintain safe, repeatable attack logic and supporting tests • Investigate failures and improve reliability, precision, and maintainability • Collaborate with software engineers, attack engineers, and offensive security SMEs to bring capabilities into production • Document research findings, attack methodologies, and technical design decisions • Review designs and code, share domain expertise, and mentor other engineers • Contribute to internal enablement and, where appropriate, external research or technical content

🎯 Requirements

• Deep hands-on experience with GCP security and offensive cloud operations • Ability to reason about IAM permissions, service identities, trust, and resource access • Expert understanding of cloud attack paths and cloud-native security concepts • Strong Python engineering skills • Experience turning security research or manual techniques into dependable production-quality automation or product capabilities • 10+ years of professional software engineering and/or offensive security experience • Experience with cloud penetration testing, red teaming, offensive security research, or building cloud security products • Experience owning ambiguous technical work, making sound trade-offs, and communicating clearly with technical and non-technical partners • Strong written communication and documentation skills • Experience with cloud privilege escalation and identity attacks • Familiarity with AWS, Azure, or OCI offensive security • Experience integrating security research into production software • Experience with GKE, Kubernetes, Terraform, gcloud, Google Cloud APIs, or cloud-native CI/CD • Contributions to security research, open-source projects, conference talks, or vulnerability disclosure • Experience mapping cloud attack coverage to frameworks such as MITRE ATT&CK for Cloud • Legal authorization to work in the United States

🏖️ Benefits

• Equity package in the form of stock options for all full-time roles • Health, vision, and dental insurance for you and your family • Flexible vacation policy • Generous parental leave • Career development opportunities • Inclusive and collaborative culture • Fully remote work arrangement • Up to 10% travel

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume