Senior Attack Engineer, External
Horizon3 AI2 hours ago
Remote, United StatesSenior
Base Salary
$206k - $243k/yr
Responsibilities
- Design, build, and maintain scalable Python reconnaissance workflows for discovering, enumerating, and fingerprinting external-facing assets and services.
- Research and parse large volumes of unstructured external data and build reliable parsing, enrichment, and attack-path modeling capabilities.
- Collect and connect identity, asset, privilege, and relationship data across external attack surfaces.
- Automate multi-step attack workflows spanning discovery, credential access, initial access, and post-exploitation.
- Research emerging external offensive tradecraft and convert it into safe, production-ready autonomous attack content.
- Maintain representative test environments for validating, demonstrating, and regression-testing attack scenarios.
- Build for production safety and scale while respecting customer environments, rate limits, and scope.
- Contribute to coverage priorities based on customer environments, threat intelligence, and emerging techniques.
- Mentor teammates, define engineering and research standards, collaborate cross-functionally, and author documentation and research content.
Requirements
- Deep hands-on offensive security experience against external attack surfaces from reconnaissance through initial access and post-exploitation.
- At least 5 years of experience in offensive security, security research, and/or security-focused software engineering, including recent work building and shipping offensive tooling.
- Experience building reconnaissance and discovery systems that operate at scale rather than one-off scripts.
- Strong ability to research and parse messy, unstructured external data into trustworthy information.
- Experience collecting, storing, and connecting high-volume data as relationships among identities, assets, and trust relationships.
- Command of identity-focused tradecraft, including credential access, password and token attacks, SSO and federation weaknesses, and movement among identities, tenants, and services.
- Experience automating multi-step attack workflows end to end.
- Strong Python and software engineering fundamentals with a record of shipping and maintaining production-quality code.
- Ability to independently research unfamiliar systems and technologies and build practical expertise quickly.
- Strong written and verbal communication skills, including technical documentation.
- Passion for building security products, not just finding vulnerabilities.
- Preferred qualifications include OSCP, OSEP, CRTO, or equivalent certifications; internet-scale data and tooling experience; Entra ID, Okta, AWS, cloud, SaaS, and hybrid identity attack-surface experience; external-to-internal pivoting experience; graph database and high-volume data processing experience; offensive tooling contributions; public security contributions; and experience building production-safe autonomous offensive tooling.
Benefits
- Fully remote work model with up to 5% travel required; hybrid work options may apply depending on role and location.
- Equity package in the form of stock options for all full-time roles.
- Health, vision, and dental insurance for employees and families.
- Flexible vacation policy and generous parental leave.
- Inclusive culture with career development and growth opportunities.
About Horizon3 AI
Horizon3 AI builds NodeZero, a proactive security platform that autonomously performs penetration testing and validates attack paths across on‑prem, cloud, and hybrid environments. The company sells its software by subscription to security and IT teams at enterprises and government agencies, helping prioritize and verify fixes. Founded in 2019 and headquartered in San Francisco, it is privately held and serves customers across regulated industries and the public sector.