Senior Attack Engineer, Internal Systems
New
H
Horizon3.aiCybersecurity
US, RemoteFull-TimeSenior
SalaryBase salary range: $206,278 - $242,680. Additional compensation: All full-time roles are eligible for an equity package in the form of stock options.
Apply NowOpens the employer's application page
Job Details
- Required Skills
- Python
Requirements
- Bring deep, hands-on offensive security experience against internal enterprise networks and Active Directory, from initial foothold through domain and enterprise compromise.
- Demonstrate expert-level Python proficiency and a track record of shipping and maintaining tested, documented, production-quality code.
- Have a strong command of internal network attack techniques, including network protocol exploitation, privilege escalation, lateral movement, and credential access.
- Have experience with object-oriented design, API integration, data structures, and scalable system components.
- Have experience designing complex software components or systems with attention to extensibility, operational safety, performance, and long-term maintenance.
- Independently lead complex technical projects, make decisions under ambiguity, and identify business implications and delivery risks.
- Communicate technical documentation, design choices, risks, and tradeoffs to technical and non-technical stakeholders.
- Demonstrate investment in teammates' growth through mentorship, architectural feedback, and code reviews.
- Have experience improving team processes, tooling, or technical standards.
- OSCP, OSEP, CRTO, or equivalent offensive security certification is a differentiator.
Responsibilities
- Research and develop novel autonomous red-team and internal-network attack capabilities for the NodeZero platform.
- Research emerging internal attack techniques and turn them into production attack content.
- Design, build, and maintain production-grade Python systems, balancing effectiveness, safety, reliability, scalability, and maintainability.
- Configure and exploit hardened internal test environments to validate complex attack scenarios.
- Monitor vulnerability databases and threat intelligence sources and incorporate emerging threats into attack modules.
- Extend platform architecture and graph data models for identity, privilege-escalation, and lateral-movement paths.
- Shape coverage priorities, scope projects, and identify risks and tradeoffs.
- Mentor teammates and improve engineering processes, code quality, architectural standards, and research safety practices.
- Partner with engineering, product, and customer-facing teams to resolve issues, enhance features, and produce technical documentation.
View Full Description & ApplyYou'll be redirected to the employer's site
