Remote Attack Engineer, Threat & Exploit Research

NightDragon Acquisition Corp.; United States; Remote; USD 230,000 - 275,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Hybrid & Remote Work

Competitive Compensation

Job summary

Horizon3 is hiring a Staff Attack Engineer to join the team behind our Rapid Response product. You will research and productize real-world exploitation techniques so customers can quickly understand whether newly disclosed or actively exploited vulnerabilities affect their environments—and what an attacker could do next.

You will focus on high-consequence vulnerabilities that are actively exploited, newly disclosed, or likely to generate significant attention—from KEVs to Zero-Days—to create

Qualifications

• Strong Python and software engineering skills; production-quality tooling.
• Solid penetration testing, vulnerability research, and exploit-development fundamentals.
• Hands-on experience with enterprise networks, applications, identity systems, cloud environments, or endpoint security.

Responsibilities

• Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, cloud environments, and infrastructure.
• Study attacker tactics, techniques, procedures, and campaigns observed in the wild.
• Turn vulnerability research into safe, repeatable proof-of-exploit capabilities for Rapid Response and NodeZero.
• Demonstrate realistic impact including privilege escalation, credential access, lateral movement, and data access.

Skills

Python

Penetration testing

Exploit development

Automation

Education

Bachelor's degree

OSCP

Tools

AWS

Azure

GCP

Kubernetes

Job description

Horizon3 is hiring a Staff Attack Engineer to join the team behind our Rapid Response product. You will research and productize real-world exploitation techniques so customers can quickly understand whether newly disclosed or actively exploited vulnerabilities affect their environments—and what an attacker could do next.

You will focus on high-consequence vulnerabilities that are actively exploited, newly disclosed, or likely to generate significant attention—from KEVs to Zero-Days—to create