Senior Attack Engineer, External

horizon3ai; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Stock options

Health, vision, and dental coverage

Flexible vacation

Parental leave

Career development opportunities

Job summary

horizon3ai is looking for a security-focused software engineer to build autonomous capabilities for discovering and validating external attack paths across large, complex environments. You will own substantial technical workstreams, convert research into production workflows, and help raise engineering standards while mentoring teammates.

Remote and hybrid arrangements are available, with full-time roles and stock options.

Qualifications

• Strong production Python experience and the ability to build reliable systems for large, varied datasets.
• Expertise in external attack surface research, reconnaissance, and offensive security techniques.
• Ability to reason about identity relationships, exposed credentials, and multi-step paths from exposure to compromise.
• Experience turning research or manual techniques into robust, automated production workflows.
• Judgment to validate attack scenarios safely and account for scope, rate limits, and customer environments.
• Ability to lead complex work independently and support the growth of other engineers.

Responsibilities

• Develop and maintain scalable Python workflows to discover, enumerate, and fingerprint externally exposed assets and services.
• Parse and enrich inconsistent data, such as banners, web content, documents, and error output, to produce accurate findings.
• Connect high-volume information and extend graph models to represent identity, privilege, and relationship paths.
• Automate end-to-end attack scenarios, linking discovery, credential access, initial access, and post-exploitation into safely validated paths.
• Research emerging techniques and turn them into production capabilities; maintain representative environments for validation and regression testing.
• Build with production safety and scale in mind, mentor teammates and contribute to priorities and team standards.

Skills

Python

Attack surface research

Identity relationships

Automation workflows

Safe testing

Mentorship

Tools

Graph models

Job description

Role overview

Build and advance autonomous capabilities for discovering and safely validating external attack paths across large, complex environments. The work turns manual reconnaissance and multi-step security testing into scalable, repeatable workflows, with a focus on the connections among internet-facing assets, identities, credentials, and services. You will own substantial technical workstreams, contribute to research priorities, and help raise engineering standards across the team.

Responsibilities

• Develop and maintain scalable Python workflows to discover, enumerate, and fingerprint externally exposed assets and services.
• Parse and enrich inconsistent data, such as banners, web content, documents, and error output, to produce accurate findings.
• Connect high-volume information and extend graph models to represent identity, privilege, and relationship paths.
• Automate end-to-end attack scenarios, linking discovery, credential access, initial access, and post-exploitation into safely validated paths.
• Research emerging techniques and turn them into production capabilities; maintain representative environments for validation and regression testing.
• Build with production safety and scale in mind, respecting target scope and rate limits; mentor teammates and contribute to priorities and team standards.

Requirements

• Strong production Python experience and the ability to build reliable systems for large, varied datasets.
• Expertise in external attack surface research, reconnaissance, and offensive security techniques.
• Ability to reason about identity relationships, exposed credentials, and multi-step paths from exposure to compromise.
• Experience turning research or manual techniques into robust, automated production workflows.
• Judgment to validate attack scenarios safely and account for scope, rate limits, and customer environments.
• Ability to lead complex work independently and support the growth of other engineers.

Benefits and work setup

• Remote and hybrid arrangements are available depending on role and location; some office-based roles may require regular in-person attendance.
• Full-time roles include stock options. The source also lists health, vision, and dental coverage, flexible vacation, parental leave, and career development opportunities.