Principal Attack Engineer, AI/LLM

Horizon3.ai

. Define the long-term technical vision for AI/LLM offense and its role in NodeZero and Horizon3’s product strategy .

Posted 10/30/2026full-timeRemote • United StatesLead💰 $238,000 - $280,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in AI/LLM security, offensive security practices, and the ability to define and execute long-term technical strategies. Proven track record in developing senior technical talent and leading cross-functional initiatives to enhance product capabilities and security standards.

Highest-signal resume keywords

Python ExpertiseOffensive SecurityAI/LLM SecurityOWASP Top 10 for LLM ApplicationsTechnical Direction

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Software EngineeringPenetration TestingExploit DevelopmentVulnerability ResearchSystem DesignTechnical WritingIncident LearningArchitectural TransformationThreat ModelingAI Infrastructure Security

Soft Skills

InfluenceMentorshipProblem SolvingCollaborationTechnical Judgment

Tools & Technologies

AWS BedrockAWS Agent CoreAzure OpenAIGoogle Vertex AIVector DatabasesGraph DatabasesNeo4jMLOps ToolingMicroservicesAgentic Architectures

Industry Keywords

AI Security ResearchCTF ExperienceMITRE ATLASOperational ReadinessCost Management

Tech Stack

Tools & technologies

AWSAzureMicroservicesNeo4jPython

About the role

Key responsibilities & impact

Define the long-term technical vision for AI/LLM offense and its role in NodeZero and Horizon3’s product strategy
Partner with senior engineering, product, and business leadership on priorities, investments, risk posture, and roadmap
Set direction for complex, high-risk, business-critical AI/LLM programs
Lead cross-company initiatives across Attack Engineering, Platform, Product, customer-facing teams, and other technical functions
Diagnose systemic blockers and drive durable resolution
Define standards for reliability, safety, observability, evaluation, testing, cost management, and operational readiness
Develop P5 engineers and senior technical leaders
Own NodeZero’s OWASP Top 10 for LLM Applications coverage strategy and extend it to multi-agent and tool-connected systems
Set the research and productization agenda for breaking AI and agentic systems
Identify novel attack classes and establish repeatable frameworks and coverage models
Direct approaches to prompt injection, defense evasion, tool-use exploitation, context poisoning, remote code execution, data exfiltration, and privilege escalation
Set direction for assessing AI infrastructure, model serving, training pipelines, vector databases, GPU/MLOps tooling, and enterprise deployments
Establish threat modeling for agentic systems
Turn research into safe, reliable, scalable NodeZero product capabilities
Set architecture for LLM-powered offensive applications, agentic workflows, evaluation systems, and NodeZero integration
Guide microservices and shared platforms orchestrating LLM tasks
Lead architectural transformations and ensure sustainable operation through ownership, incident learning, and measurable quality standards
Represent Horizon3 through technical writing, talks, research, or open-source contributions where appropriate
Travel up to 10% as required

Requirements

What you’ll need

Exceptional Python and software engineering expertise
Deep experience designing secure, reliable, observable, and operable systems at scale
Deep expertise in offensive security, penetration testing, exploit development, vulnerability research, or a closely related discipline
Recognized expertise in AI/LLM and agentic-system security
Deep command of the OWASP Top 10 for LLM Applications and MITRE ATLAS
Track record of shipping or shaping high-impact security capabilities, platforms, research programs, or technical standards across multiple teams
Ability to define long-term technical vision, resolve ambiguous problems, and drive execution through influence
Company-wide technical judgment across product value, safety, reliability, cost, speed, and maintainability
Ability to develop senior technical talent and multiply mentorship capacity
Experience setting technical direction or architecture across an engineering organization or multiple product areas
Industry-level contributions to AI security research through publications, conference talks, CVEs, open-source projects, or widely adopted techniques
Experience shaping strategy for AWS Bedrock, AWS Agent Core, Azure OpenAI, or Google Vertex AI
Experience with agentic architectures, tool-use security, retrieval systems, vector databases, graph databases such as Neo4j, or AI infrastructure security
Background in traditional exploit development, vulnerability research, or building offensive security platforms at significant scale
CTF experience, particularly in AI/ML-focused challenge categories
Legally authorized to work in the United States

Benefits

Comp & perks

All full-time roles are eligible for an equity package in the form of stock options
Career development opportunities
Collaborative environment that encourages creativity and out-of-the-box thinking
Health, vision & dental insurance for you and your family
Flexible vacation policy
Generous parental leave
Inclusive culture
Fully remote work model
Up to 10% travel