Staff Attack Engineer — Remote Automation of Real-World Exploits

Horizon3.ai; United States; Remote; USD 230,000 - 275,000; Full time

Benefits offered by this job

Inclusive Team

Growth opportunities

Innovative culture

Hybrid & Remote Work

Competitive compensation

Job summary

Horizon3.ai is hiring a Staff Attack Engineer for the team behind our Rapid Response product. You will research and productize real-world exploitation techniques to help customers quickly assess exposure and remediation actions.

You will focus on high-consequence vulnerabilities actively exploited or newly disclosed, turning attacker tradecraft into safe, repeatable attack capabilities for automated use. This role emphasizes rapid validation of defenses and threat-informed remediation.

Qualifications

• Strong Python and software engineering skills with production-quality tooling.
• Solid penetration testing and vulnerability research fundamentals.
• Hands-on experience with enterprise networks, cloud environments, or identity systems.
• Ability to reproduce vulnerabilities and convert techniques into reliable automation.
• Understanding of common attack chains, trust boundaries, authentication/authorization, privilege escalation, and lateral movement.

Responsibilities

• Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, cloud environments, and infrastructure—including CISA KEVs, CVEs, N-Days, and Zero-Days.
• Study attacker tactics, techniques, procedures, and campaigns observed in the wild, including tradecraft not tied to a single CVE.
• Turn vulnerability research and real-world attacker behavior into safe, repeatable proof-of-exploit capabilities, attack paths, and automated modules for Rapid Response and NodeZero.
• Demonstrate realistic impact—including privilege escalation, credential access, lateral movement, persistence, and data access—without unnecessary disruption.
• Validate remediation and containment by safely retesting vulnerabilities and security controls.
• Improve execution speed, reliability, observability, and evidence quality while collaborating with research, product, and engineering teams.

Skills

Python

Vulnerability research

Exploit development

Enterprise networks

Cloud environments

Automation

Attack chains

Ownership & communication

Education

Bachelor’s Degree in CS/CE or related field

Job description

Horizon3.ai is hiring a Staff Attack Engineer for the team behind our Rapid Response product. You will research and productize real-world exploitation techniques to help customers quickly assess exposure and remediation actions.

You will focus on high-consequence vulnerabilities actively exploited or newly disclosed, turning attacker tradecraft into safe, repeatable attack capabilities for automated use. This role emphasizes rapid validation of defenses and threat-informed remediation.