Senior Attack Engineer, Internal Systems

The role

You will research and develop novel attack capabilities for the NodeZero platform. You will design, build, and maintain production-grade Python systems to automate offensive security techniques.

What you will do

• Research and develop novel attack capabilities for the NodeZero platform
• Turn emerging internal tradecraft into production attack content
• Design, build, and maintain production-grade Python systems
• Acquire, configure, and exploit modern, hardened internal test environments
• Monitor public vulnerability databases and threat intelligence sources
• Extend and maintain platform architecture and graph data models
• Help shape the team's coverage priorities
• Mentor teammates and improve team processes, code quality, and research safety
• Partner cross-functionally with engineers, product managers, and customer-facing teams

Required qualifications

• Deep, hands-on offensive security experience against internal enterprise networks and Active Directory
• Expert-level proficiency in Python for large-scale development
• Track record of shipping and maintaining tested, documented, production-quality code
• Strong command of internal network attack techniques
• Experience with object-oriented design, API integration, and data structures
• Experience designing complex software components or systems
• Track record of independently leading complex, high-impact technical projects
• Strong written and verbal communication
• Demonstrated investment in teammates' growth through proactive mentorship and code reviews
• Offensive security and software engineering background

Nice to have

• OSCP (or OSEP, CRTO, or equivalent offensive certifications)
• Experience researching and implementing attacks against SCCM, Windows Admin Center, and other modern Windows management-plane attack surfaces
• Familiarity with containerization (Docker, Kubernetes)
• Working with relational (Postgres) and graph (Neo4j) databases
• Experience developing or contributing to offensive tooling like BloodHound, Impacket, netexec, etc.
• Hands-on experience with graph databases (Neo4j) and attack-path analysis
• Experience integrating security research into production, multi-tenant SaaS
• Public contributions to the field: open-source tools, technical blog posts, conference talks, or published CVEs
• Experience building production-safe autonomous or automated offensive tooling, including applying AI/LLM technologies

Benefits

• health, vision & dental insurance for you and your family
• flexible vacation policy
• generous parental leave
• equity package in the form of stock options

About the company

Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors. The team is a fusion of former U.S. Special Operations cyber operators, startup engineers, and cybersecurity practitioners.