Lead AD Attack Engineer - Autonomous Pentesting Platform

horizon3ai; United States; Remote; USD 247.000 - 275.000; Vollzeit

Benefits dieser Stelle

Equity

Health, vision & dental insurance

Flexible vacation policy

Generous parental leave

Zusammenfassung

Horizon3 is seeking a Staff Attack Engineer to lead internal-network and Active Directory attack capabilities within NodeZero, our autonomous pentesting platform. You’ll drive research, create production-grade Python, and shape the attack content for enterprise environments remotely.

The role emphasizes leadership, strong AD expertise, and a passion for building secure, scalable tooling that operates safely at scale across diverse networks.

Qualifikationen

• Hands-on offensive experience against AD and internal networks.
• Command of AD tradecraft: credential access, Kerberos/NTLM techniques, certificate services abuse, ACL/GPO abuse, lateral movement.
• Experience with modern hardened environments (NTLM deprecation, Kerberos-only).
• Strong Python and production-grade coding track record.
• Ability to independently research unfamiliar systems and become the team expert.
• Previous technical leadership: setting direction and mentoring engineers.
• Excellent written and verbal communication; documentation quality.
• 8+ years in offensive security and/or software engineering focused on AD/internal networks.

Aufgaben

• Serve as the technical lead for internal-network and AD attack capabilities in NodeZero.
• Research emerging AD tradecraft and turn into production attack content.
• Design, build, and maintain production-grade Python powering these capabilities at scale.
• Work on hardened environments and attacks that succeed when easy paths are closed.
• Stand up and test representative AD environments to validate attack scenarios.
• Extend attack-path modeling and graph data to new identity and lateral-movement paths.
• Set priorities and the coverage roadmap based on customers and threat intel.
• Mentor attack engineers and raise coding and research standards.
• Collaborate with cross-functional teams and author internal docs and external research.

Kenntnisse

Offensive security

Active Directory

Python

Technical leadership

Research & learning

Technical writing

Software engineering

Communication

AD attacks

Tools

BloodHound

Impacket

netexec

Neo4j

Jobbeschreibung

Horizon3 is seeking a Staff Attack Engineer to lead internal-network and Active Directory attack capabilities within NodeZero, our autonomous pentesting platform. You’ll drive research, create production-grade Python, and shape the attack content for enterprise environments remotely.

The role emphasizes leadership, strong AD expertise, and a passion for building secure, scalable tooling that operates safely at scale across diverse networks.