Remote Staff Attack Engineer - Automated Exploit Research

NightDragon Acquisition Corp.; United States; Remote; USD 200,000 - 275,000; Full time

Benefits offered by this job

Inclusive culture

Growth opportunities

Hybrid & Remote work

Competitive compensation

Health, vision & dental insurance

Flexible vacation policy

Parental leave

Job summary

Horizon3 is hiring a Staff Attack Engineer to join the team behind our Rapid Response product. You will research and productize real-world exploitation techniques so customers can quickly understand whether newly disclosed or actively exploited vulnerabilities affect their environments—and what an attacker could do next.

You will focus on high-consequence vulnerabilities that are actively exploited, newly disclosed, or likely to generate significant attention from KEVs and Zero-Days to N-Days,

Qualifications

• Strong Python and software engineering skills.
• Solid penetration testing, vulnerability research, and exploit-development fundamentals.
• Hands-on experience with enterprise networks, applications, identity systems, cloud environments, or endpoint security.
• Demonstrated ability to reproduce vulnerabilities and convert manual techniques into reliable automation.
• Understanding of common attack chains, trust boundaries, authentication and authorization, privilege escalation, and lateral movement.

Responsibilities

• Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, cloud environments, and infrastructure—including CISA KEVs, CVEs, N-Days, and Zero-Days.

Skills

Python

Penetration testing

Exploit development

Automation

Cloud knowledge

Communication

Ownership

Education

Bachelor's degree in CS or related field

Tools

AWS

Azure

GCP

Kubernetes

Job description

Horizon3 is hiring a Staff Attack Engineer to join the team behind our Rapid Response product. You will research and productize real-world exploitation techniques so customers can quickly understand whether newly disclosed or actively exploited vulnerabilities affect their environments—and what an attacker could do next.

You will focus on high-consequence vulnerabilities that are actively exploited, newly disclosed, or likely to generate significant attention from KEVs and Zero-Days to N-Days,