Senior Attack Engineer, GCP

The role

You will build GCP attack content from the ground up for the NodeZero platform. You will research GCP services, identify attack paths, and develop offensive capabilities.

What you will do

• Lead research into GCP attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques.
• Design, implement, and validate production-quality Python attack capabilities.
• Chain individual weaknesses into realistic attack paths.
• Set technical direction for GCP attack coverage.
• Build and maintain safe, repeatable attack logic and supporting tests.
• Collaborate with software engineers, attack engineers, and offensive security SMEs.
• Document research findings, attack methodologies, and technical design decisions.
• Review designs and code, share domain expertise, and mentor other engineers.
• Contribute to internal enablement and external research or technical content.

Required qualifications

• Deep hands-on experience with GCP security and offensive cloud operations.
• Expert understanding of cloud attack paths and cloud-native security concepts.
• Strong Python engineering skills.
• 10+ years of professional software engineering and or/ offensive security experience.
• Experience with cloud penetration testing, red teaming, offensive security research, or building cloud security products.
• A record of owning ambiguous technical work, making sound trade-offs, and communicating clearly.
• Strong written communication and a habit of documenting research and design decisions.

Nice to have

• Experience with cloud privilege escalation and identity attacks.
• Familiarity with AWS, Azure, or OCI offensive security.
• Experience integrating security research into production software.
• Experience with GKE, Kubernetes, Terraform, gcloud, Google Cloud APIs, or cloud-native CI/CD.
• Contributions to security research, open-source projects, conference talks, or vulnerability disclosure.
• Experience mapping cloud attack coverage to frameworks such as MITRE ATT&CK for Cloud.

Benefits

• Equity package in the form of stock options
• Health, vision & dental insurance for you and your family
• Flexible vacation policy
• Generous parental leave

About the company

Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors. Their flagship product is the NodeZeroTM platform.