Senior/Staff Attack Engineer, Rapid Response
Horizon3 · Remote · US, Remote ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior/Staff level
- Fully remote (US)
- Python + Security
- Equity package included
- Up to 10% travel
Join the team behind Horizon3's Rapid Response product to research and productize exploitation techniques. You will transform vulnerability research and attacker tradecraft into safe, automated attack capabilities for the NodeZero platform. Your work helps security teams validate exposure and verify defenses against high-consequence vulnerabilities like Zero-Days and CISA KEVs.
What you'll do
- Research and reproduce high-consequence vulnerabilities across enterprise networks and cloud environments.
- Study attacker tactics and techniques observed in the wild, including those not tied to specific CVEs.
- Convert manual exploitation techniques into safe, repeatable, and automated modules for NodeZero.
- Demonstrate realistic impact such as privilege escalation and lateral movement without causing disruption.
- Validate remediation efforts by safely retesting vulnerabilities and security controls.
- Collaborate with research, product, and engineering teams to improve execution speed and reliability.
What you'll need
- Strong Python and software engineering skills for building production-quality tooling.
- Solid fundamentals in penetration testing, vulnerability research, and exploit development.
- Hands-on experience with enterprise networks, identity systems, or cloud environments.
- Proven ability to reproduce vulnerabilities and convert manual techniques into reliable automation.
- Deep understanding of attack chains, trust boundaries, and privilege escalation methods.
- Ability to balance speed, safety, and coverage while providing actionable evidence.
- Strong ownership and communication skills for time-sensitive situations.
Nice to have
- Experience with CISA KEVs, N-Day research, or Zero-Day analysis.
- Background in incident response, threat hunting, or purple teaming.
- Familiarity with AWS, Azure, GCP, Kubernetes, Active Directory, or Okta.
- Experience in exploit development, reverse engineering, or malware analysis.
- Contributions to security research, open-source tools, or technical publications.
- CTF experience or equivalent hands-on offensive security practice.
- OSCP certification or a degree in Computer Science or related field.
Stack
- Python
- AWS
- Azure
- GCP
- Kubernetes
- Active Directory
- Entra ID
- Okta
How you'll work
- Fully remote company culture
- Up to 10% travel may be required
- Flexible vacation policy
What you get
- Base salary range $230,000 - $275,000 annually
- Equity package in the form of stock options
- Health, vision, and dental insurance for family
- Generous parental leave
- Inclusive and collaborative culture