Senior Attack Engineer, Kubernetes

The role

You will lead the development of Kubernetes attack capabilities in NodeZero. You will research how attackers move through clusters and turn research into safe, repeatable Python capabilities.

What you will do

• Lead offensive security research into Kubernetes clusters, workloads, identities, configurations, and cloud-connected environments.
• Design and build production-quality Python attack capabilities.
• Develop and validate attack paths involving Kubernetes RBAC, service accounts, credentials, workloads, pods, secrets, and network reachability.
• Assess Kubernetes security weaknesses and build safe validation and negative testing.
• Own technical planning for Kubernetes initiatives including research prioritization and design trade-offs.
• Integrate attack content into NodeZero execution and results flows.
• Review code and designs, mentor teammates, and share expertise.
• Document methodologies, assumptions, limitations, and test approaches.

Required qualifications

• Deep hands-on experience with Kubernetes security and offensive testing of containerized environments.
• Expert level understanding of Kubernetes architecture and identity and authorization controls, especially RBAC, service accounts, workloads, and cluster boundaries.
• Strong Python engineering skills and experience productizing security research into reliable automation.
• Experience with penetration testing, red teaming, vulnerability research, container security, or offensive security tooling.
• Ability to lead ambiguous, cross-functional technical work and communicate attack paths and impact clearly.
• A strong safety and product mindset.
• A record of owning complex technical projects, making sound trade-offs, and communicating clearly with technical and non-technical partners.
• Strong written communication and a habit of documenting research and design decisions.

Nice to have

• Experience with EKS, GKE, AKS, OKE, or other managed Kubernetes services.
• Knowledge of Linux, containers, cloud workload identity, Kubernetes operators, Helm, or infrastructure as code.
• Experience with network attack paths, container escape research, or cloud-to-cluster attack paths.
• Contributions to open-source security tooling, public research, conference talks, or vulnerability disclosure.

Benefits

• Equity package in the form of stock options
• Health, vision & dental insurance for you and your family
• Flexible vacation policy
• Generous parental leave

About the company

Horizon3 is a fast-growing, remote cybersecurity company dedicated to enabling organizations to proactively find and fix exploitable attack vectors. Their flagship product, NodeZero, delivers production-safe autonomous pentests.