Horizon3AI
Senior/Staff Attack Engineer, Rapid Response
$200K–$275K
US, Remote · Remote · Staff · Full-time · Posted Oct 7, 2026
About the job
Researches high-consequence vulnerabilities and attacker techniques, then builds safe automated attack capabilities that help customers validate exposure, prioritize remediation, and verify defenses.
What you'll do
- Research and reproduce vulnerabilities and study real-world attacker tradecraft across enterprise, cloud, identity, and infrastructure environments.
- Convert research into safe, repeatable proof-of-exploit capabilities, attack paths, and automated modules for Rapid Response and NodeZero.
- Demonstrate realistic impact and safely retest vulnerabilities and controls, while improving execution speed, reliability, observability, and evidence quality.
What they ask for
- Strong Python and software engineering skills, including building, testing, and operating production-quality tooling.
- Solid penetration testing, vulnerability research, and exploit-development fundamentals.
- Hands-on experience with enterprise networks, applications, identity systems, cloud environments, or endpoint security.
- Ability to reproduce vulnerabilities and convert manual techniques into reliable automation.
Nice to have
- Experience with CISA KEVs, CVE analysis, N-Day or Zero-Day research, or responsible disclosure.
- Background in incident response, threat hunting, purple teaming, or security operations.
Pay
$200,000 - $275,000 annually (base salary)
Tools
Python, AWS, Azure, GCP, Kubernetes, Active Directory, Entra ID, Okta
Model-written summary · the original posting is authoritative