Senior Attack Engineer, Horizon3

• Problem-Solving: Strong analytical skills with an aptitude for solving complex technical problems
• Self-Motivation: The ability to work independently with minimal supervision, demonstrating initiative and a high level of energy
• Collaboration: Work closely with the NodeZero team, N-Day researchers, and adjacent teams to weaponize reverse-engineered exploits for product integration and rapidly develop new cross-functional features
• Communication: Strong technical writing and documentation skills, with the ability to convey findings and methodologies to both technical and non-technical stakeholders
• Technical Design: Proficiency in designing, presenting, and evaluating technical solutions, ensuring high-quality software and secure development practices
• Adaptability: Ability to independently learn and adapt to new technologies, tools, and methodologies
• Proficiency in Python: Proficiency in large-scale Python software development
• Software Engineering: Strong understanding of secure software development practices, including experience with version control systems like Git and effective team workflows
• Reverse Engineering: Experience reversing Java applications, C#, .NET, and native application binaries and experience in reverse engineering technologies like IDA or Ghidra
• Vulnerability Exploitation: In-depth knowledge of common Remote Code Execution (RCE) techniques such as SQL injection, path traversal, and buffer overflow exploits
• Network Protocols: Strong understanding of network protocols and their intricacies, including their role in exploitation vectors
• Database Experience: Experience with relational (Postgres) or graph (Neo4j) database systems
• Equivalent experience may be considered if demonstrable through proof-of-concept write-ups, published vulnerability research, or similar achievements

Desirable

• The Senior Attack Engineer - Vulnerability Research role is responsible for developing and maintaining core parts of NodeZero’s autonomous penetration testing platform while leveraging the latest InfoSec news to swiftly weaponize newly discovered public vulnerabilities
• This platform coordinates execution of an ever-growing set of “attack modules” to efficiently and safely conduct a penetration test in the target environment
• You will be involved in tasks ranging from vulnerability research, such as analyzing the web components of popular virtualization technologies, to patch-diffing firmware updates in VPN applications, to software development aimed at enhancing and extending the capabilities of our core product
• This is a dynamic position that offers the opportunity to work on a wide range of tasks, from building proof-of-concept exploits to advancing our red teaming technologies
• Acquire and configure vulnerable test systems to replicate and validate attack scenarios
• Reverse engineer application binaries and patches to identify vulnerabilities
• Develop and validate proof-of-concept exploits for identified vulnerabilities and ensure their integration into the core product
• Design and implement foundational technology improvements to enable rapid development of exploitation modules
• Collaborate closely with engineering teams to enhance product capabilities and develop new features
• Maintain a comprehensive global view of emerging vulnerabilities, ensuring Horizon3 remains current with the latest threat landscape
• Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice

• In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information