Senior Attack Engineer, Kubernetes

About this role

Lead research and development of Kubernetes offensive-security capabilities for Horizon3’s NodeZero platform. The role covers attack research, production-quality automation, and integration of reliable evidence and explanations into the product.

About the company

Horizon3.ai is a technology company specializing in cybersecurity solutions, focusing on automated penetration testing and threat detection for enterprises. They provide a range of services aimed at enhancing security posture and risk management for organizations across various sectors.

The team

Proactive Offense / Core Attack

Stack

What you'll do

• Research attack paths across Kubernetes clusters, workloads, identities, configurations, and cloud-connected environments.
• Build production-quality Python capabilities that model realistic attacker perspectives, including assumed-breach scenarios.
• Validate attack paths involving RBAC, service accounts, secrets, cluster boundaries, networking, and cloud identities.
• Build safe validation and negative testing into attack capabilities.
• Lead technical planning, prioritize research, and coordinate delivery across product and engineering partners.
• Integrate attack content into NodeZero and provide customers with clear, reliable evidence.
• Review designs and code, mentor teammates, and document methodologies and limitations.

What we're looking for

• Deep hands-on experience with Kubernetes security and offensive testing of containerized environments.
• Expert understanding of Kubernetes architecture, RBAC, service accounts, workloads, and cluster boundaries.
• Strong Python engineering skills and experience productizing security research into reliable automation.
• Experience in penetration testing, red teaming, vulnerability research, container security, or offensive-security tooling.
• Ability to lead ambiguous cross-functional work and communicate attack paths and impact clearly.
• Strong product-safety mindset and experience owning complex technical projects.

Nice to have

• Experience with managed Kubernetes services such as EKS, GKE, AKS, or OKE.
• Knowledge of cloud workload identity, Kubernetes operators, Helm, or infrastructure as code.
• Experience with network attack paths, container escape research, or cloud-to-cluster attacks.
• Open-source security contributions, public research, conference talks, or vulnerability disclosures.

Benefits

• Stock options
• Health, vision, and dental insurance for employees and their families
• Flexible vacation policy
• Generous parental leave