Staff AD Attack Engineer - Remote, Lead & Build

Horizon3 AI; United States; Remote; USD 235,000 - 275,000; Full time

Benefits offered by this job

Inclusive culture

Hybrid & Remote work

Competitive compensation

Job summary

Horizon3 AI is seeking a Staff Attack Engineer to lead internal network and Active Directory attack capabilities within the NodeZero autonomous pentesting platform. You will set the technical direction, mentor engineers, and turn advanced attack techniques into safe, scalable content across large enterprise environments.

The role emphasizes building production-grade Python tooling, researching AD tradecraft, and guiding safer, repeatable attack content for enterprise secOps teams.

Qualifications

• Hands-on offensive AD experience across enterprise networks.
• Mastery of credential access, Kerberos/NTLM attacks, AD CS abuse, ACL/GPO abuse, lateral movement.
• Experience defending hardened environments with mitigated attack paths.
• Strong Python programming with production-grade code.
• Ability to rapidly research unfamiliar systems and become the team expert.

Responsibilities

• Lead internal-network and Active Directory attack capabilities for NodeZero.
• Turn cutting-edge attack techniques into safe, repeatable production content.
• Develop and maintain production-grade Python tooling for attacks at enterprise scale.
• Design and validate attack scenarios in representative AD test environments.
• Mentor engineers and maintain high code quality and safety standards.
• Collaborate with cross-functional teams and document research.

Skills

AD attack experience

AD tradecraft

Python expert

Technical leadership

Communication

8+ years exp

Self-learning

Education

OSCP or equivalent

Tools

BloodHound

Impacket

netexec

SCCM

Job description

Horizon3 AI is seeking a Staff Attack Engineer to lead internal network and Active Directory attack capabilities within the NodeZero autonomous pentesting platform. You will set the technical direction, mentor engineers, and turn advanced attack techniques into safe, scalable content across large enterprise environments.

The role emphasizes building production-grade Python tooling, researching AD tradecraft, and guiding safer, repeatable attack content for enterprise secOps teams.