Senior Attack Engineer, GCP
Horizon3 AI1 day ago
Remote, United StatesStaff+
Base Salary
$206k - $243k/yr
Responsibilities
- Research GCP attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques.
- Design, implement, and validate production-quality Python attack capabilities across GCP cloud-native services.
- Chain weaknesses into realistic attack paths with reliable proof of exploitability and actionable customer outcomes.
- Set technical direction and roadmap priorities for GCP attack coverage in collaboration with Product and Engineering.
- Build safe, repeatable attack logic and supporting tests while improving reliability, precision, and maintainability.
- Collaborate with software engineers, attack engineers, and offensive security subject-matter experts to bring capabilities into production.
- Document research findings, attack methodologies, and technical design decisions.
- Review designs and code, share GCP expertise, mentor engineers, and contribute to internal enablement or external technical content.
Requirements
- Deep hands-on experience with GCP security and offensive cloud operations, including IAM permissions, service identities, trust, and resource access.
- Expert understanding of cloud attack paths and cloud-native security concepts.
- Strong Python engineering skills and experience converting security research or manual techniques into dependable production automation or product capabilities.
- 10+ years of professional software engineering and/or offensive security experience.
- Experience with cloud penetration testing, red teaming, offensive security research, or building cloud security products.
- Experience owning ambiguous technical work, making sound trade-offs, and communicating with technical and non-technical partners.
- Strong written communication and consistent documentation of research and design decisions.
- Preferred experience with cloud privilege escalation, identity attacks, AWS, Azure, OCI, GKE, Kubernetes, Terraform, gcloud, Google Cloud APIs, or cloud-native CI/CD.
- Preferred contributions to security research, open-source projects, conference talks, or vulnerability disclosure.
- Preferred experience mapping cloud attack coverage to frameworks such as MITRE ATT&CK for Cloud.
Benefits
- Fully remote company with up to 10% travel required.
- Health, vision, and dental insurance for employees and families.
- Flexible vacation policy and generous parental leave.
- Equity package in the form of stock options for all full-time roles.
- Competitive salary and benefits with an inclusive, collaborative, and growth-oriented culture.
Categories
About Horizon3 AI
Horizon3 AI builds NodeZero, a proactive security platform that autonomously performs penetration testing and validates attack paths across on‑prem, cloud, and hybrid environments. The company sells its software by subscription to security and IT teams at enterprises and government agencies, helping prioritize and verify fixes. Founded in 2019 and headquartered in San Francisco, it is privately held and serves customers across regulated industries and the public sector.