Senior/Staff Attack Engineer, Rapid Response

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $230k - $275k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Horizon3.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Horizon3. ai is a cybersecurity company that specializes in autonomous penetration testing through its platform, NodeZero. The company's mission is to proactively identify and address attack vectors before they can be exploited, allowing organizations to continuously assess their security posture across various environments including cloud, IoT, and on-premises systems. Founded by veterans from the US Special Operations and National Security sectors, Horizon3. ai offers a self-service SaaS solution that provides organizations with insights into their security vulnerabilities without requiring persistent or credentialed agents.

📋 Description

• Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, cloud environments, and infrastructure • Study attacker tactics, techniques, procedures, and campaigns observed in the wild • Turn vulnerability research and real-world attacker behavior into safe, repeatable proof-of-exploit capabilities, attack paths, and automated modules for Rapid Response and NodeZero • Demonstrate realistic impact, including privilege escalation, credential access, lateral movement, persistence, and data access, without unnecessary disruption • Validate remediation and containment by safely retesting vulnerabilities and security controls • Improve execution speed, reliability, observability, and evidence quality • Collaborate with research, product, and engineering teams • Help security teams rapidly validate exposure, prioritize remediation, and verify that defenses are working

🎯 Requirements

• Strong Python and software engineering skills, including experience building, testing, and operating production-quality tooling • Solid penetration testing, vulnerability research, and exploit-development fundamentals • Hands-on experience with enterprise networks, applications, identity systems, cloud environments, or endpoint security • Demonstrated ability to reproduce vulnerabilities and convert manual techniques into reliable automation • Understanding of common attack chains, trust boundaries, authentication and authorization, privilege escalation, and lateral movement • Ability to balance speed, safety, reliability, coverage, and actionable evidence • Strong ownership, judgment, and communication skills in ambiguous or time-sensitive situations • Experience with CISA KEVs, CVE analysis, N-Day research, Zero-Day research, or responsible disclosure is desirable • Background in incident response, threat hunting, purple teaming, or security operations is desirable • Experience with AWS, Azure, GCP, Kubernetes, Active Directory, Entra ID, Okta, or hybrid environments is desirable • Experience with exploit development, reverse engineering, malware analysis, or vulnerability research is desirable • Contributions to security research, CVEs, conference talks, open-source tools, or technical publications are desirable • CTF experience or equivalent hands-on offensive security practice is desirable • Bachelor’s Degree in Computer Science, Computer Engineering or related field is desirable • OSCP or equivalent certifications are desirable • Legally authorized to work in the United States • Must not require employment visa sponsorship now or in the future

🏖️ Benefits

• Equity package in the form of stock options for all full-time roles • Health insurance for you and your family • Vision insurance for you and your family • Dental insurance for you and your family • Flexible vacation policy • Generous parental leave • Career development opportunities • Inclusive and collaborative work culture • Fully remote work arrangement • Up to 10% travel