Staff AD Attack Engineer (Autonomous Pentest Lead)

AI Chopping Block; Northern (KY); Hybrid; USD 247,000 - 275,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Innovative Culture

Hybrid & Remote Work

Competitive Compensation

Job summary

Horizon3 is seeking a Staff Attack Engineer to lead internal-network and Active Directory attack capabilities within NodeZero, our autonomous pentesting platform. This role focuses on turning cutting-edge strategies into safe, repeatable attacks for enterprise environments.

You will drive the research of AD tradecraft, design production-grade tooling in Python, and mentor engineers while collaborating across teams. This is a fully remote role with up to 10% travel.

Qualifications

• Hands-on offensive experience against Active Directory and internal networks.
• Credential access, Kerberos attacks, NTLM coercion and relay, AD Certificate Services abuse, ACL/GPO abuse, lateral movement.
• Experience attacking hardened environments (NTLM deprecation, Kerberos-only).
• Strong Python and production-grade code experience.

Responsibilities

• Serve as the technical lead for internal-network and Active Directory attack capabilities across NodeZero.
• Research and turn AD and internal tradecraft into production attack content.
• Design, build, and maintain production-grade Python powering these capabilities at enterprise scale.
• Stand up and validate AD test environments and attack scenarios.
• Extend attack-path modeling and roadmaps based on customer environments and threat intel.
• Mentor engineers and raise code quality and safety.

Skills

Active Directory attack

Python

Offensive security

Research

Leadership

Documentation

Communication

Tools

BloodHound

Impacket

netexec

Neo4j

Job description

Horizon3 is seeking a Staff Attack Engineer to lead internal-network and Active Directory attack capabilities within NodeZero, our autonomous pentesting platform. This role focuses on turning cutting-edge strategies into safe, repeatable attacks for enterprise environments.

You will drive the research of AD tradecraft, design production-grade tooling in Python, and mentor engineers while collaborating across teams. This is a fully remote role with up to 10% travel.