Lead Attack Engineer, Active Directory & Internal Networks

Horizon3; United States; Remote; USD 247,000 - 275,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Hybrid & Remote Work

Competitive Compensation

Job summary

Horizon3 is seeking a Staff Attack Engineer to lead internal network and Active Directory attack capabilities in NodeZero. You will turn frontier techniques into safe, repeatable production attacks at enterprise scale, mentor engineers, and shape the research roadmap while collaborating with cross-functional teams.

The role emphasizes building secure tooling, advancing AD tradecraft, and working in a fully remote environment with occasional travel to major hubs.

Qualifications

• Hands-on offensive experience against Active Directory and internal networks.
• Strong Python coding and production-grade software development.
• Experience leading security research and developing attack content for SaaS platforms.
• Ability to mentor engineers and drive high‑complexity projects.
• Clear written and verbal communication, and technical documentation skills.

Responsibilities

• Serve as technical lead for internal-network and AD attack capabilities across NodeZero.
• Research AD tradecraft and productionize it as attack content.
• Design, build, and maintain production-grade Python powering capabilities.
• Develop attack content that remains effective as defenses evolve.
• Lead roadmap priorities based on customer environments and threat intel.
• Mentor engineers and collaborate with cross-functional teams.
• Publish internal documentation and external research.

Skills

AD attack experience

Python

Offensive security leadership

Research and content roadmap

Technical documentation

Mentoring engineers

Strong communication

8+ years experience

Job description

Horizon3 is seeking a Staff Attack Engineer to lead internal network and Active Directory attack capabilities in NodeZero. You will turn frontier techniques into safe, repeatable production attacks at enterprise scale, mentor engineers, and shape the research roadmap while collaborating with cross-functional teams.

The role emphasizes building secure tooling, advancing AD tradecraft, and working in a fully remote environment with occasional travel to major hubs.