Staff Attack Engineer: Real-World Exploit Automation

Openkrill; United States; Remote; USD 230,000 - 275,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Innovative Culture

Hybrid & Remote Work

Job summary

Horizon3 is hiring a Staff Attack Engineer to research real-world exploitation techniques and productize them for the Rapid Response team. You will build safe, repeatable exploit modules and attack paths to help customers assess exposure and validate defenses at scale.

You will focus on high-consequence vulnerabilities actively exploited or newly disclosed, translating attacker tradecraft into automated capabilities for enterprise environments.

Qualifications

• Bachelor’s Degree in CS, CS/E or related field.
• Strong Python and production-grade tooling skills.
• Solid penetration testing, vulnerability research, and exploit development fundamentals.

Responsibilities

• Research and reproduce high-consequence vulnerabilities across networks, apps, and cloud.
• Study attacker TTPs and campaigns observed in the wild.
• Turn research into safe, repeatable proof-of-exploit modules for Rapid Response and NodeZero.
• Demonstrate realistic impact including privilege escalation and data access.
• Safely retest vulnerabilities and security controls to validate remediation.

Skills

Python

Software engineering

Penetration testing

Exploit development

Vulnerability research

Attack chains

Automation

Communication

Education

Bachelor’s Degree in Computer Science or related field

OSCP or equivalent certification

Job description

Horizon3 is hiring a Staff Attack Engineer to research real-world exploitation techniques and productize them for the Rapid Response team. You will build safe, repeatable exploit modules and attack paths to help customers assess exposure and validate defenses at scale.

You will focus on high-consequence vulnerabilities actively exploited or newly disclosed, translating attacker tradecraft into automated capabilities for enterprise environments.