Senior Attack Engineer, Internal Systems
Horizon3 AI3 hours ago
Remote, United StatesSenior
Base Salary
$206k - $243k/yr
Responsibilities
- Research and develop autonomous red-team, internal network, and offensive security capabilities for integration into the NodeZero platform.
- Research network protocol exploitation, Active Directory abuse, management-plane attacks, delegation, credential access, and hybrid identity pivots, then convert findings into production attack content.
- Design, build, and maintain production-grade Python systems with attention to safety, reliability, scalability, performance, and maintainability.
- Acquire, configure, and exploit hardened internal test environments to validate complex attack scenarios.
- Monitor vulnerability databases and threat intelligence sources and incorporate emerging threats into internal network attack modules.
- Extend platform architecture and graph data models for identity, privilege-escalation, and lateral-movement paths.
- Shape coverage priorities, scope complex projects, identify risks and tradeoffs, and make consequential technical decisions.
- Mentor teammates and improve code quality, architectural standards, research safety practices, tooling, and team processes.
- Collaborate with engineering, product, and customer-facing teams to resolve issues, enhance features, document technical work, and drive customer value.
Requirements
- Deep hands-on offensive security experience against internal enterprise networks and Active Directory, from initial foothold through domain and enterprise compromise.
- Expert-level Python proficiency and a record of shipping and maintaining tested, documented, production-quality code.
- Strong knowledge of network protocol exploitation, privilege escalation, lateral movement, and credential access.
- Experience with object-oriented design, API integration, data structures, and scalable software components.
- Experience designing complex systems with attention to extensibility, operational safety, performance, and long-term maintenance.
- Track record of independently leading complex, high-impact technical projects and making sound decisions under ambiguity.
- Strong written and verbal communication, including technical documentation and explanation of design tradeoffs.
- Experience mentoring teammates and improving processes, tooling, technical standards, or architectural practices.
- OSCP, OSEP, CRTO, or equivalent offensive security certification is preferred.
- Experience with SCCM, Windows Admin Center, Docker, Kubernetes, Postgres, Neo4j, BloodHound, Impacket, netexec, attack-path analysis, production SaaS, public security contributions, autonomous offensive tooling, or AI/LLM technologies is preferred.
Benefits
- Fully remote work arrangement with up to 10% travel required; the company also describes hybrid options depending on role and location.
- Full-time roles are eligible for an equity package in the form of stock options.
- Health, vision, and dental insurance are available for employees and their families.
- Flexible vacation policy and generous parental leave are provided.
- The company offers growth opportunities, an inclusive culture, and career development opportunities.
Tech Stack
Categories
About Horizon3 AI
Horizon3 AI builds NodeZero, a proactive security platform that autonomously performs penetration testing and validates attack paths across on‑prem, cloud, and hybrid environments. The company sells its software by subscription to security and IT teams at enterprises and government agencies, helping prioritize and verify fixes. Founded in 2019 and headquartered in San Francisco, it is privately held and serves customers across regulated industries and the public sector.