Staff Attack Engineer

🕒 June 11

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Horizon3.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Horizon3. ai is a cybersecurity company that specializes in autonomous penetration testing through its platform, NodeZero. The company's mission is to proactively identify and address attack vectors before they can be exploited, allowing organizations to continuously assess their security posture across various environments including cloud, IoT, and on-premises systems. Founded by veterans from the US Special Operations and National Security sectors, Horizon3. ai offers a self-service SaaS solution that provides organizations with insights into their security vulnerabilities without requiring persistent or credentialed agents.

📋 Description

• Research Oracle Cloud Infrastructure services and identify offensive security opportunities across the platform • Develop new attack techniques, attack paths, and security assessments targeting OCI environments • Build and maintain production-quality Python code that powers NodeZero attack capabilities • Conduct offensive security research against OCI compute, networking, storage, databases, IAM, Kubernetes, and cloud-native services • Analyze real-world OCI deployments to identify common attack vectors and customer risk patterns • Collaborate closely with software engineers, attack engineers, and offensive security SMEs to bring new capabilities into production • Document research findings, attack methodologies, and technical design decisions • Help prioritize future OCI attack coverage based on customer demand and emerging threats • Contribute to the technical direction of NodeZero's cloud attack capabilities

🎯 Requirements

• Hands-on offensive security experience targeting Oracle Cloud Infrastructure (OCI) • Strong understanding of cloud attack paths and cloud-native security concepts • Experience with web application testing, cloud penetration testing, external assessments, or red team operations • Experience writing Python code for automation, tooling, or offensive security workflows • Ability to independently research unfamiliar technologies and rapidly become an expert • Strong written communication and technical documentation skills • Passion for building products, not just finding vulnerabilities • 10+ years of professional software engineering and/or offensive security experience • Preferred: Experience attacking OCI Kubernetes Engine (OKE) • Preferred: Experience with cloud privilege escalation and identity attacks

🏖️ Benefits

• Health, vision & dental insurance for you and your family • Flexible vacation policy • Generous parental leave • Equity package in the form of stock options • Growth opportunities within a dynamic and growing team • Collaborative environment that encourages creativity