Staff Attack Engineer, External

horizon3ai; United States; Remote; USD 238,000 - 280,000; Full time

Benefits offered by this job

Stock options

Medical coverage

Dental coverage

Vision coverage

Flexible vacation

Parental leave

Job summary

horizon3ai is looking for a technical leader to set the direction for external attack capabilities in an autonomous security testing platform. You will transform researchers’ reconnaissance and attack-path analysis into scalable software that can assess large and complex environments, while owning roadmaps and mentoring engineers.

This leadership role blends research, production engineering, and cross-team collaboration to ensure safety, reliability, and operational excellence in security

Qualifications

• Strong production engineering skills in Python and experience building scalable reconnaissance or security automation.
• Deep understanding of external attack surfaces, identity relationships, and how weaknesses can be chained into compromise paths.
• Ability to turn security research and unstructured data into accurate, reliable production capabilities.
• Experience validating attack scenarios in test environments and designing for safety across large target sets.
• Technical leadership skills, including setting priorities, mentoring engineers, and working across teams.

Responsibilities

• Build and maintain scalable Python workflows to discover, enumerate, and fingerprint internet-facing assets and services.
• Parse and enrich inconsistent data such as service banners, web content, documents, and error output.
• Extend data models and graph relationships to connect assets, identities, privileges, exposed credentials, and potential attack paths.
• Automate multi-step attack scenarios and research emerging techniques for production-ready assessment content.
• Create representative test environments and validate scenarios while respecting scope, rate limits, and customer safety.
• Guide technical priorities and mentor engineers, raising standards for research rigor, code quality, and operational safety.

Skills

Python production engineering

Security automation

Security research

Data modeling

Leadership & mentoring

Job description

Role overview

Set technical direction for external attack capabilities in an autonomous security testing platform. The work turns skilled operators’ reconnaissance and attack-path analysis into safe, scalable, repeatable software that can assess large and complex external environments. This is a technical leadership role combining research, production engineering, roadmap ownership, and mentorship.

Responsibilities

• Build and maintain scalable Python workflows to discover, enumerate, and fingerprint internet-facing assets and services.
• Parse and enrich inconsistent data such as service banners, web content, documents, and error output.
• Extend data models and graph relationships to connect assets, identities, privileges, exposed credentials, and potential attack paths.
• Automate multi-step attack scenarios and research emerging techniques for production-ready assessment content.
• Create representative test environments and validate scenarios while respecting scope, rate limits, and customer safety.
• Guide technical priorities and mentor engineers, raising standards for research rigor, code quality, and operational safety.

Requirements

• Strong production engineering skills in Python and experience building scalable reconnaissance or security automation.
• Deep understanding of external attack surfaces, identity relationships, and how weaknesses can be chained into compromise paths.
• Ability to turn security research and unstructured data into accurate, reliable production capabilities.
• Experience validating attack scenarios in test environments and designing for safety across large target sets.
• Technical leadership skills, including setting priorities, mentoring engineers, and working across teams.

Benefits and work setup

The position is remote. The listed annual base salary range is $238,000–$280,000, with stock options for full-time employees; compensation depends on location, qualifications, experience, and skills. Benefits include medical, dental, and vision coverage, flexible vacation, and parental leave.