206K–243K USD / year
Senior Attack Engineer, Internal Systems
BackendRemote — United States
Published on 2026-10-26
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build production-grade capabilities for NodeZero, an autonomous penetration-testing platform. Research and automate internal network and Active Directory attack techniques, turning them into safe, reliable tools that work at enterprise scale.
About the company
Horizon3.ai is a technology company specializing in cybersecurity solutions, focusing on automated penetration testing and threat detection for enterprises. They provide a range of services aimed at enhancing security posture and risk management for organizations across various sectors.
The team
Proactive Offense, Core Attack
Stack
PythonPostgreSQLNeo4jDockerKubernetes
What you'll do
- Research and develop autonomous internal-network attack capabilities.
- Turn emerging techniques involving Active Directory, credentials, management planes, and hybrid identity into production attack modules.
- Build and maintain scalable Python systems with attention to safety, reliability, and maintainability.
- Validate complex attack scenarios in modern, hardened test environments.
- Extend platform architecture and graph models for identity, privilege escalation, and lateral movement.
- Lead technical projects, mentor teammates, and improve engineering and research practices.
What we're looking for
- Hands-on offensive security experience compromising internal enterprise networks and Active Directory.
- Expert Python skills and experience shipping tested, documented, production-quality software.
- Strong knowledge of network exploitation, privilege escalation, lateral movement, and credential access.
- Experience with software architecture, object-oriented design, APIs, and scalable systems.
- Ability to lead complex technical projects and communicate technical decisions, risks, and tradeoffs.
Nice to have
- OSCP, OSEP, CRTO, or equivalent certification.
- Experience with SCCM, Windows Admin Center, or other Windows management-plane attack surfaces.
- Contributions to offensive tools such as BloodHound, Impacket, or netexec.
- Experience with Neo4j, attack-path analysis, or production multi-tenant SaaS.
- Public security contributions such as open-source tools, technical writing, talks, or CVEs.
- Experience building safe autonomous offensive tools or applying AI/LLMs to attack workflows.
Benefits
- Stock options
- Flexible vacation policy
- Generous parental leave
- Health, vision, and dental insurance for employees and their families