Staff Attack Engineer, Internal/AD

What you'll do

• Set technical direction and research priorities for internal-network and Active Directory attack coverage.
• Research emerging attack techniques and build, test, and maintain production Python capabilities for hardened enterprise environments.
• Extend attack-path modeling, mentor engineers, and collaborate on documentation and research publications.

What they ask for

• Hands-on offensive experience against Active Directory and internal enterprise networks, including current AD tradecraft and attacks on hardened environments.
• Expert-level Python and a record of shipping and maintaining production-quality software.
• Technical leadership experience, including setting direction and mentoring engineers; strong written and verbal communication.
• 8+ years of combined offensive security and/or software engineering experience, with significant time focused on Active Directory and internal network attacks.

Nice to have

• OSCP, OSEP, CRTO, or equivalent offensive certification.
• Experience with SCCM or other Windows management-plane attacks, hybrid identity, offensive tooling, graph databases, or production-safe automated offensive tooling.

Pay

$235,000 - $275,000 (base salary)

Tools

Python, Active Directory, SCCM/ConfigMgr, Kerberos, NTLM, Entra ID, Entra Connect, Neo4j