Senior Attack Engineer, Internal Systems

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $206.3k - $242.7k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Horizon3.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Horizon3. ai is a cybersecurity company that specializes in autonomous penetration testing through its platform, NodeZero. The company's mission is to proactively identify and address attack vectors before they can be exploited, allowing organizations to continuously assess their security posture across various environments including cloud, IoT, and on-premises systems. Founded by veterans from the US Special Operations and National Security sectors, Horizon3. ai offers a self-service SaaS solution that provides organizations with insights into their security vulnerabilities without requiring persistent or credentialed agents.

📋 Description

• Research and develop novel attack capabilities for integration into the NodeZero autonomous pentesting platform • Research emerging internal tradecraft and convert it into production attack content • Design, build, and maintain production-grade Python systems • Balance attack effectiveness, operational safety, reliability, scalability, and maintainability • Acquire, configure, and exploit hardened internal test environments • Monitor vulnerability databases and threat intelligence sources • Extend platform architecture and graph data models for identity, privilege-escalation, and lateral-movement paths • Shape coverage priorities using customer needs, threat intelligence, and emerging techniques • Scope deliverable projects and proactively raise risks and tradeoffs • Mentor teammates and improve processes, code quality, architectural standards, and research safety practices • Partner with engineers, product managers, and customer-facing teams to resolve issues, enhance features, author documentation, and drive customer value • Independently lead complex internal network and Active Directory attack projects from research and technical design through production delivery and ongoing operation

🎯 Requirements

• Deep, hands-on offensive security experience against internal enterprise networks and Active Directory, from initial foothold through domain and enterprise compromise • Expert-level proficiency in Python and a track record of shipping and maintaining tested, documented, production-quality code • Strong command of network protocol exploitation, privilege escalation, lateral movement, and credential access • Experience with object-oriented design, API integration, data structures, and scalable system components • Experience designing complex software components or systems with extensibility, operational safety, performance, and long-term maintenance considerations • Track record of independently leading complex, high-impact technical projects and making sound decisions under ambiguity • Strong written and verbal communication, technical documentation, and ability to explain design choices, risks, and tradeoffs • Experience mentoring teammates and improving team processes, tooling, or technical standards • Offensive security and software engineering background with passion for turning security research into product capabilities • OSCP, OSEP, CRTO, or equivalent offensive certifications preferred • Experience with SCCM, Windows Admin Center, Docker, Kubernetes, Postgres, Neo4j, BloodHound, Impacket, or netexec preferred • Experience with graph databases and attack-path analysis preferred • Experience integrating security research into production multi-tenant SaaS preferred • Public contributions such as open-source tools, technical blog posts, conference talks, or published CVEs preferred • Experience building production-safe autonomous or automated offensive tooling, including AI/LLM applications, preferred • Legally authorized to work in the United States

🏖️ Benefits

• Equity package in the form of stock options for all full-time roles • Health, vision & dental insurance for you and your family • Flexible vacation policy • Generous parental leave • Career development opportunities • Collaborative environment encouraging creativity and out-of-the-box thinking • Remote and hybrid work models depending on role and location • Inclusive culture • Up to 10% travel