Senior Attack Engineer, OCI
Horizon3 AI1 day ago
Remote, United StatesSenior
Base Salary
$206k - $243k/yr
Responsibilities
- Research OCI attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques.
- Design, implement, test, and maintain production-quality Python attack capabilities across OCI cloud-native services.
- Chain weaknesses into realistic attack paths with reliable proof of exploitability and actionable customer outcomes.
- Improve the reliability, precision, and maintainability of attack logic and supporting tests.
- Collaborate with software engineers, attack engineers, offensive security subject-matter experts, technical leads, and managers to bring capabilities into production.
Requirements
- Hands-on OCI security and offensive cloud operations experience, including IAM permissions, service identities, trust, and resource access.
- Advanced understanding of cloud attack paths and cloud-native security concepts.
- Python engineering experience translating security research or manual techniques into dependable automation or product capabilities.
- At least 4 years of professional software engineering and/or offensive security experience.
- Experience with cloud penetration testing, red teaming, offensive security research, or building cloud security products.
- Documented collaboration with diverse engineering teams as an individual contributor.
- Preferred experience includes cloud privilege escalation, identity attacks, AWS, Azure, GCP, OKE, Kubernetes, Terraform, Oracle Cloud APIs, cloud-native CI/CD, security research, open-source contributions, conference talks, vulnerability disclosure, or MITRE ATT&CK for Cloud mapping.
Benefits
- Fully remote work arrangement with up to 10% travel required.
- Base salary range of $206,278-$242,680 plus equity eligibility for full-time roles.
- Health, vision, and dental insurance for employees and families.
- Flexible vacation policy and generous parental leave.
- Growth opportunities, an inclusive culture, and access to hybrid work options depending on role and location.
Tech Stack
Categories
About Horizon3 AI
Horizon3 AI builds NodeZero, a proactive security platform that autonomously performs penetration testing and validates attack paths across on‑prem, cloud, and hybrid environments. The company sells its software by subscription to security and IT teams at enterprises and government agencies, helping prioritize and verify fixes. Founded in 2019 and headquartered in San Francisco, it is privately held and serves customers across regulated industries and the public sector.