Senior Attack Engineer, Kubernetes
Horizon3 AI1 day ago
Remote, United StatesSenior
Base Salary
$206k - $243k/yr
Responsibilities
- Lead offensive security research into Kubernetes clusters, workloads, identities, configurations, and cloud-connected environments.
- Design and build production-quality Python capabilities that model realistic Kubernetes attacker perspectives.
- Develop and validate attack paths involving RBAC, service accounts, credentials, workloads, pods, secrets, cluster and node boundaries, network reachability, and cloud identities.
- Assess Kubernetes weaknesses, determine meaningful and provable impact, and build safe validation and negative testing into capabilities.
- Own technical planning for Kubernetes initiatives, including identifying coverage gaps, prioritizing research, making design trade-offs, and coordinating delivery.
- Integrate attack content into NodeZero execution and results flows to provide customers with reliable evidence and clear explanations.
- Review code and designs, establish quality expectations, mentor teammates, and share Kubernetes offensive-security expertise.
- Document methodologies, assumptions, limitations, and test approaches and contribute to technical enablement.
Requirements
- Deep hands-on experience with Kubernetes security and offensive testing of containerized environments.
- Expert understanding of Kubernetes architecture, RBAC, service accounts, workloads, and cluster boundaries.
- Strong Python engineering skills and experience productizing security research into reliable automation.
- Experience with penetration testing, red teaming, vulnerability research, container security, or offensive security tooling.
- Ability to lead ambiguous cross-functional technical work and communicate attack paths and impact clearly.
- Experience owning complex technical projects, making sound trade-offs, and communicating with technical and non-technical partners.
- Strong written communication and consistent documentation of research and design decisions.
- Preferred experience with EKS, GKE, AKS, OKE, or other managed Kubernetes services.
- Preferred knowledge of Linux, containers, cloud workload identity, Kubernetes operators, Helm, or infrastructure as code.
- Preferred experience with network attack paths, container escape research, cloud-to-cluster attack paths, open-source security tooling, public research, conference talks, or vulnerability disclosure.
Benefits
- Fully remote work, with hybrid and office arrangements varying by role and location.
- Up to 10% travel may be required.
- Base salary range of $206,278–$242,680, plus equity in the form of stock options.
- Health, vision, and dental insurance for employees and families.
- Flexible vacation policy and generous parental leave.
- Inclusive culture, professional growth opportunities, and collaborative innovation environment.
Tech Stack
Categories
About Horizon3 AI
Horizon3 AI builds NodeZero, a proactive security platform that autonomously performs penetration testing and validates attack paths across on‑prem, cloud, and hybrid environments. The company sells its software by subscription to security and IT teams at enterprises and government agencies, helping prioritize and verify fixes. Founded in 2019 and headquartered in San Francisco, it is privately held and serves customers across regulated industries and the public sector.