Senior Attack Engineer, GCP

horizon3ai; United States; Remote; USD 206,000 - 243,000; Full time

Benefits offered by this job

Stock options

Health and dental coverage

Flexible vacation

Parental leave

Job summary

horizon3ai is seeking a senior security engineer to lead development of offensive security capabilities for Google Cloud environments. You will shape coverage priorities, turn validated findings into customer evidence, and drive production-quality automation from research ideas.

The role emphasizes deep cloud security expertise, strong Python skills, and the ability to guide teams, document decisions, and mentor engineers in cloud attack content. Remote role, based in the United States.

Qualifications

• Deep practical experience with cloud security and offensive cloud operations.
• Strong understanding of cloud attack paths and cloud-native security.
• Experience turning security research into product capabilities.
• Ability to lead technical work and communicate findings clearly.

Responsibilities

• Research attack paths involving cloud identities, trust relationships, service configurations, and emerging techniques.
• Build and validate Python capabilities across cloud permissions, service identities, compute, Kubernetes, storage, databases, secrets, and networking.
• Combine weaknesses into realistic attack paths and provide safe, repeatable evidence of their impact.
• Set technical priorities with product and engineering partners, from identifying coverage gaps to planning delivery.
• Improve reliability and maintainability, document methods and design decisions, and review code and designs.
• Share expertise and mentor engineers developing cloud attack content.

Skills

Cloud security expertise

Python programming

Offensive security research

Leadership & communication

Technical project leadership

Tools

Python

Job description

Role overview

Lead the development of offensive security capabilities for Google Cloud environments. The work spans cloud security research, attack-path design, and production-quality automation, with responsibility for shaping coverage priorities and turning validated findings into clear customer evidence.

Responsibilities

• Research attack paths involving cloud identities, trust relationships, service configurations, and emerging techniques.


• Build and validate Python capabilities across cloud permissions, service identities, compute, Kubernetes, storage, databases, secrets, and networking.


• Combine weaknesses into realistic attack paths and provide safe, repeatable evidence of their impact.


• Set technical priorities with product and engineering partners, from identifying coverage gaps to planning delivery.


• Improve reliability and maintainability, document methods and design decisions, and review code and designs.


• Share expertise and mentor engineers developing cloud attack content.

Requirements

• Deep practical experience with cloud security and offensive cloud operations, including identity, permissions, trust, and resource access.


• Strong understanding of cloud attack paths and cloud-native security.


• Strong Python skills and experience turning security research or manual techniques into dependable product capabilities.


• At least 10 years of professional software engineering and/or offensive security experience.


• Experience in cloud penetration testing, red teaming, offensive security research, or related work.


• Ability to lead technical work and communicate findings clearly.

Benefits and work setup

• The role is remote.


• The source lists a base salary range of $206,278–$242,680.


• Stock options for full-time employees.


• Health and dental coverage.


• Flexible vacation.


• Parental leave.