Horizon3AI
Senior Attack Engineer, External
$206K–$243K
US, Remote · Remote · Senior · Full-time · Posted Oct 19, 2026
- Experience
- 5+ years; experience may be in offensive security, security research, and/or security-focused software engineering.
About the job
Develops scalable, production-safe autonomous reconnaissance and attack workflows for NodeZero’s external attack capabilities.
What you'll do
- Build and maintain scalable Python workflows to discover, parse, and connect external-facing assets and data.
- Automate and validate multi-step attack paths, including identity-related paths, while ensuring safe operation at scale.
- Research emerging attack techniques, shape coverage priorities, and mentor teammates.
What they ask for
- 5+ years of hands-on experience in offensive security, security research, and/or security-focused software engineering, with recent work building and shipping offensive tooling.
- Deep hands-on offensive experience across external attack surfaces, from reconnaissance through initial access and post-exploitation.
- Experience building scalable reconnaissance and discovery systems and automating end-to-end attack workflows.
- Strong Python software engineering skills and experience parsing unstructured data and modeling relationships across high-volume data.
Nice to have
- OSCP, OSEP, CRTO, or equivalent offensive certification.
- Experience with internet-scale data sources, cloud or SaaS identity attack surfaces, graph databases, or production-safe automated offensive tooling.
Pay
Base salary range: $206,278 - $242,680 annually (USD); additional compensation: equity package in the form of stock options.
Tools
Python, Entra ID, Okta, AWS
Model-written summary · the original posting is authoritative