Remote GCP Attack Engineer - Lead Cloud Offensive Security

Horizon3.ai; United States; Ibrido; USD 206.000 - 243.000; Tempo pieno

Vantaggi offerti da questo lavoro

Inclusive team

Growth opportunities

Innovative culture

Hybrid & remote work

Competitive compensation

Descrizione del lavoro

Horizon3.ai is seeking an Attack Engineer with deep GCP expertise to build cloud attack capabilities within NodeZero. You will own GCP attack content from ground up, researching Google Cloud services, identifying misconfigurations, and developing offensive capabilities at scale.

This is a strategic, technical-lead role shaping Horizon3.ai's GCP offensive security strategy and how GCP attacks integrate into the platform. Travel up to 10% may be required.

Competenze

• Deep hands-on experience with GCP security and offensive cloud operations.
• Expert understanding of cloud attack paths and cloud-native security concepts.
• Strong Python engineering skills for automation and product capabilities.
• Passion for building products, not just finding vulnerabilities.
• 10+ years of professional software engineering or offensive security experience.
• Experience with cloud pentesting, red teaming, or building cloud security products.
• Ability to own ambiguous technical work and communicate clearly.
• Strong written communication and documentation habits.

Mansioni

• Lead research into GCP attack paths, identity/trust, misconfigurations, and attacker techniques.
• Design and validate production-quality Python attack capabilities spanning GCP IAM, GKE, storage, and more.
• Chain weaknesses into realistic attack paths with clear customer outcomes.
• Set technical direction for GCP attack coverage and prioritize with Product/Engineering.
• Build safe, repeatable attack logic and reliable tests; diagnose failures.
• Collaborate with engineers and SMEs to bring new capabilities to production.
• Document research findings, methodologies, and design decisions.
• Review designs and mentor others developing GCP attack content.
• Contribute to internal enablement and external technical content.

Conoscenze

GCP expertise

Python engineering

Cloud security

Offensive security

Security research

Communication

Mentoring

Documentation

Strumenti

GCP

Python

Cloud security tools

Kubernetes

Descrizione del lavoro

Horizon3.ai is seeking an Attack Engineer with deep GCP expertise to build cloud attack capabilities within NodeZero. You will own GCP attack content from ground up, researching Google Cloud services, identifying misconfigurations, and developing offensive capabilities at scale.

This is a strategic, technical-lead role shaping Horizon3.ai's GCP offensive security strategy and how GCP attacks integrate into the platform. Travel up to 10% may be required.