Staff Attack Engineer — Autonomous PenTesting Leader

Horizon3.ai; United States; Remote; USD 238,000 - 280,000; Full time

Benefits offered by this job

Health insurance

Equity and stock options

Flexible vacation

Job summary

Horizon3 is seeking a Staff Attack Engineer to lead external attack capabilities for NodeZero, our autonomous pentesting platform. You will set the technical direction, champion scalable reconnaissance, and serve as a trusted expert for engineers building production-grade tooling.

You’ll design repeatable workflows that operate at scale across large environments, reason about identities and relationships, automate end-to-end attack paths, and collaborate with product, research, and customer

Qualifications

• Hands-on offensive experience against external attack surfaces.
• 10+ years in offensive security, security research, or security-focused software engineering.
• Experience building reconnaissance and discovery systems at scale.
• Ability to parse large, messy external data into usable information.
• Experience modeling identities, assets, and trust relationships.
• Ability to automate multi-step attack workflows end-to-end.
• Strong Python development and production-quality code discipline.
• Excellent written and verbal communication; independent research capability.

Responsibilities

• Design, build, and maintain scalable reconnaissance workflows in production-grade Python.
• Research and parse large volumes of external data to produce actionable information.
• Develop robust parsing/enrichment for hard-to-reason-about data.
• Collect and connect high volumes of information; extend attack-path modeling.
• Traverse identity relationships across external surfaces to find exposure paths.
• Automate multi-step attack workflows into complete, proven attack paths.
• Research external tradecraft and convert it into production attack content.
• Stand up representative test environments to validate attack scenarios.
• Build for production safety and scale; respect targets, rate limits, and scope.
• Set priorities and roadmaps based on customer environments and threat intel.
• Mentor attack engineers and raise the bar on code quality and safety.
• Collaborate cross-functionally and author internal docs and external research.

Skills

Offensive security

Python

Reconnaissance at scale

Data parsing & enrichment

Identity/trust relationships

Attack workflow automation

Production-quality code

Technical leadership

Documentation & communication

Mentoring engineers

Threat modeling / attack-path analysis

Tools

Certificate Transparency

Passive DNS

Internet-wide scanning

Graph databases

Job description

Horizon3 is seeking a Staff Attack Engineer to lead external attack capabilities for NodeZero, our autonomous pentesting platform. You will set the technical direction, champion scalable reconnaissance, and serve as a trusted expert for engineers building production-grade tooling.

You’ll design repeatable workflows that operate at scale across large environments, reason about identities and relationships, automate end-to-end attack paths, and collaborate with product, research, and customer