206K–243K USD / year
Senior Attack Engineer, OCI
OtherRemote — United States
Published on 2026-11-06
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build offensive security capabilities for Oracle Cloud Infrastructure (OCI) in Horizon3.ai’s NodeZero platform. Research cloud attack paths and turn them into reliable, production-quality Python automation that safely assesses customer environments.
About the company
Horizon3.ai is a technology company specializing in cybersecurity solutions, focusing on automated penetration testing and threat detection for enterprises. They provide a range of services aimed at enhancing security posture and risk management for organizations across various sectors.
The team
Proactive Offense, Core Attack
Stack
PythonOracle Cloud Infrastructure (OCI)Oracle Cloud APIsKubernetesOKETerraform
What you'll do
- Research OCI attack paths, identity relationships, misconfigurations, and attacker techniques
- Build and validate Python attack capabilities across OCI IAM, compute, Kubernetes/OKE, storage, databases, secrets, and networking
- Chain weaknesses into realistic attack paths with reliable proof of exploitability
- Develop safe, repeatable attack logic and tests; improve reliability and maintainability
- Collaborate with engineers and offensive security specialists to bring capabilities into production
What we're looking for
- Hands-on OCI security and offensive cloud operations experience, including IAM, service identities, trust, and resource access
- Advanced understanding of cloud attack paths and cloud-native security
- Strong Python engineering skills and experience productizing security research or manual techniques
- At least 4 years of software engineering and/or offensive security experience
- Experience in cloud penetration testing, red teaming, offensive security research, or cloud security products
- Track record of collaborating with engineering teams as an individual contributor
- Interest in building products, not only finding vulnerabilities
Nice to have
- Cloud privilege escalation or identity attack experience
- Offensive security experience with AWS, Azure, or GCP
- Experience with OKE, Kubernetes, Terraform, Oracle Cloud APIs, or cloud-native CI/CD
- Security research, open-source contributions, conference talks, or vulnerability disclosures
- Experience mapping cloud attack coverage to MITRE ATT&CK for Cloud
Benefits
- Stock options
- Health, vision, and dental insurance for employees and families
- Flexible vacation policy
- Generous parental leave
Hiring process
- Not specified