Attack Engineer, Horizon3

• Ideal candidates are fluent in Python, comfortable shipping robust code to production, and excited by the challenge of applying their engineering skills to offensive tooling, and autonomous/agentic orchestration
• 7+ years of combined experience in software engineering and red teaming/ offensive security
• Expert-level proficiency in Python for large-scale development
• Proficient in object-oriented design, test-driven development, and scalable code design
• Experience designing and integrating APIs, data structures, and full-stack system components
• Experience developing in fast-paced, product-driven environments with distributed teams
• Skilled with Git and modern team collaboration workflows (PRs, CI/CD, code reviews)
• Familiar with containerization and orchestration tools such as Docker and Kubernetes
• Comfortable working with relational (Postgres) and graph (Neo4j) databases
• Hands-on experience with developing tools for offensive cybersecurity and/or red team operations
• Deep understanding of common RCE techniques (e.g., SQL injection, buffer overflows, path traversal)
• Familiar with exploitation of network protocols, web applications, and complex enterprise software
• Ability to translate security research into functional, autonomous attacks within a product context
• Experience attacking Windows environments (e.g., Active Directory), cloud platforms (AWS, Azure, GCP), and/or Kubernetes
• Outstanding analytical and problem-solving aptitude, especially when dealing with unfamiliar systems
• Self-motivated and energetic with the ability to operate independently with minimal supervision
• Ability to manage multiple priorities and deliver on both short- and long-term objectives
• Strong written and verbal communication skills; capable of creating technical documentation and explaining complex topics to a broad audience
• Demonstrated curiosity and adaptability; quick to adopt new technologies and domains

Desirable

• We’re seeking an experienced Attack Engineer who blends deep software engineering expertise with a passion for cybersecurity. In this role, you’ll design and build production-grade systems that drive the offensive capabilities of the NodeZero platform. You’ll be responsible for researching and weaponizing real-world vulnerabilities, developing scalable exploit content, and leveraging AI technologies to automate and enhance attack workflows
• This is a high-impact, cross-disciplinary role for someone who wants to shape the future of autonomous offensive security
• Research and develop novel attack capabilities for integration into the NodeZero platform, focusing on autonomous red teaming and offensive security automation
• Weaponize newly discovered vulnerabilities (N-days) and reverse-engineered exploits for inclusion in productized attack chains
• Acquire, configure, and exploit vulnerable test environments to validate and demonstrate attack scenarios
• Extend and maintain platform architecture and data models to support new research and product features
• Monitor public vulnerability databases and threat intelligence sources to stay current on emerging threats
• Collaborate cross-functionally with engineers, product managers, and customer teams to resolve issues, enhance features, and drive customer value
• Mentor teammates and improve team processes, code quality, and research standards
• Author technical blog posts and internal documentation showcasing new capabilities, research, and methodologies