Senior Attack Engineer, OCI

horizon3ai; United States; Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Stock options

Health, vision, and dental coverage

Flexible vacation

Parental leave

Job summary

Horizon3ai is seeking a seasoned offensive cloud security engineer to build production-ready capabilities for Oracle Cloud Infrastructure assessments. You will blend cloud security research with practical Python engineering to uncover realistic attack paths, validate exploitability, and deliver repeatable, reliable assessment tooling.

You will collaborate with software engineers and security specialists to bring capabilities into production, applying disciplined software practices and building

Qualifications

• Hands-on OCI security and offensive cloud experience with permissions and identities.
• Advanced understanding of cloud-native security and attack paths.
• Python engineering experience turning research into automation or features.
• 4+ years of professional software engineering or offensive security experience.
• Experience in cloud penetration testing, red teaming, or cloud security product development.
• Proven collaboration with diverse engineering teams as an individual contributor.

Responsibilities

• Research OCI attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques.
• Develop and validate Python capabilities across cloud identity, compute, Kubernetes, storage, databases, secrets, networking, and related services.
• Link individual weaknesses into realistic attack paths and demonstrate their exploitability safely.
• Maintain repeatable attack logic and supporting tests; investigate failures and improve reliability and precision.
• Work with software engineers and offensive security specialists to bring capabilities into production.
• Apply disciplined software development practices to implement attack paths with technical and team leads.

Skills

OCI security

Cloud security concepts

Python engineering

Offensive security experience

Job description

Role overview

Build new offensive security capabilities for assessing Oracle Cloud Infrastructure environments. The role combines cloud security research with production Python engineering: uncovering realistic attack paths, validating exploitability, and turning findings into reliable assessments that provide actionable results.

Responsibilities

• Research OCI attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques.
• Develop and validate Python capabilities across cloud identity, compute, Kubernetes, storage, databases, secrets, networking, and related services.
• Link individual weaknesses into realistic attack paths and demonstrate their exploitability safely.
• Maintain repeatable attack logic and supporting tests; investigate failures and improve reliability and precision.
• Work with software engineers and offensive security specialists to bring capabilities into production.
• Apply disciplined software development practices to implement attack paths with technical and team leads.

Requirements

• Hands-on OCI security and offensive cloud experience, including reasoning about permissions, service identities, trust, and resource access.
• Advanced understanding of cloud-native security and attack paths.
• Python engineering experience, including converting security research or manual techniques into dependable automation or product features.
• At least four years of professional software engineering and/or offensive security experience.
• Experience in cloud penetration testing, red teaming, offensive research, or cloud security product development.
• A record of collaborating with varied engineering teams as an individual contributor, and interest in building products.

Nice to have

• Experience with cloud privilege escalation and identity attacks.
• Familiarity with offensive security in AWS, Azure, or GCP.

Benefits and work setup

• Full-time roles include stock options.
• Benefits described in the listing include health, vision, and dental coverage, flexible vacation, and parental leave.
• Work arrangements may be remote or hybrid depending on role and location.