Staff AD Attack Engineer — Autonomous Pentest Lead

Horizon3; United States; À distance; USD 247 000 - 275 000; Plein temps

Avantages offerts par ce poste

Hybrid & Remote Work flexibility

Competitive compensation with equity

Comprehensive health, vision & dental

Résumé du poste

Horizon3 is a fully remote cybersecurity company delivering autonomous offensive capabilities through NodeZero. We seek a Staff Attack Engineer to lead AD and internal network attack content, turning advanced techniques into reliable, scalable production content for enterprise deployments.

You will mentor engineers, shape the research roadmap, and collaborate with product and customers while staying ahead of evolving AD defenses across diverse environments.

Qualifications

• Eight+ years of offensive security and/or software engineering experience, with significant AD/enterprise attack focus.
• Deep, hands-on experience against Active Directory and internal networks from foothold to compromise.
• Command of AD tradecraft: credential access, Kerberos/NTLM abuse, ACL/GPO misuse, and lateral movement.
• Strong Python programming with production-quality code delivery.
• Ability to research unfamiliar systems quickly and become the team's expert.
• Proven technical leadership: setting direction, handling high-risk work, mentoring engineers.
• Excellent written and verbal communication and documentation.
• Desire to build secure, automated offensive tooling and production-ready content.

Responsabilités

• Serve as the technical lead and SME for internal-network and AD attack capabilities across NodeZero.
• Research and translate AD tradecraft into production attack content.
• Design, build, and maintain production-grade Python powering these capabilities.
• Focus on hardened environments and attack paths that survive modern defenses.
• Set priorities and develop the coverage roadmap based on customer environments.
• Mentor engineers and raise the bar on code quality and safety.
• Collaborate with engineers, product managers, and customer teams; author documentation and research.

Connaissances

Active Directory offense

Python programming

Technical leadership

Strong communication

Offensive security

Formation

Certifications: OSCP/OSEP/CRTO or equivalent

Outils

BloodHound

Impacket

netexec

Neo4j

Description du poste

Horizon3 is a fully remote cybersecurity company delivering autonomous offensive capabilities through NodeZero. We seek a Staff Attack Engineer to lead AD and internal network attack content, turning advanced techniques into reliable, scalable production content for enterprise deployments.

You will mentor engineers, shape the research roadmap, and collaborate with product and customers while staying ahead of evolving AD defenses across diverse environments.