Senior Attack Engineer

Horizon3.ai

. Research OCI attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques .

Posted 11/6/2026full-timeRemote • United StatesSenior💰 $206,278 - $242,680 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in OCI security and offensive cloud operations, with strong Python engineering skills for developing production-quality automation. Proven ability to collaborate with diverse engineering teams and implement effective cloud attack strategies.

Highest-signal resume keywords

OCI Security ExperiencePython Engineering SkillsCloud Penetration TestingOffensive Security ResearchKubernetes/OKE Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Attack PathsIAM Permissions ReasoningService IdentitiesResource AccessCloud-Native Security ConceptsProduction-Quality AutomationCloud Privilege EscalationIdentity AttacksTerraformOracle Cloud APIs

Soft Skills

CollaborationPassion for Product Development

Tools & Technologies

KubernetesOKEAWSAzureGCPCI/CD

Industry Keywords

Red TeamingOffensive SecuritySecurity ResearchVulnerability DisclosureMITRE ATT&CK for Cloud

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesOraclePythonTerraform

About the role

Key responsibilities & impact

Research OCI attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques
Design, implement, and validate production-quality Python attack capabilities across OCI IAM, service accounts and workload identities, compute, Kubernetes/OKE, storage, databases, secrets, networking, and other cloud-native services
Chain individual weaknesses into realistic attack paths with reliable proof of exploitability and clear, actionable customer outcomes
Build and maintain safe, repeatable attack logic and supporting tests
Investigate failures and improve reliability, precision, and maintainability
Collaborate with software engineers, attack engineers, and offensive security SMEs to bring new capabilities into production
Implement OCI-based attack paths based on direction from the technical lead and team manager
Help build NodeZero's next-generation OCI cloud attack capabilities

Requirements

What you’ll need

Hands-on experience with OCI security and offensive cloud operations
Ability to reason about IAM permissions, service identities, trust, and resource access
Advanced understanding of cloud attack paths and cloud-native security concepts
Python engineering skills and experience turning security research or manual techniques into dependable production-quality automation or product capabilities
Passion for building products, not just finding vulnerabilities
4+ years of professional software engineering and/or offensive security experience
Experience with cloud penetration testing, red teaming, offensive security research, or building cloud security products
Documented history of collaboration with diverse engineering teams to develop products as an individual contributor
Preferred: experience with cloud privilege escalation and identity attacks
Preferred: familiarity with AWS, Azure, or GCP offensive security
Preferred: experience integrating security research into production software
Preferred: experience with OKE, Kubernetes, Terraform, Oracle Cloud APIs, or cloud-native CI/CD
Preferred: contributions to security research, open-source projects, conference talks, or vulnerability disclosure
Preferred: experience mapping cloud attack coverage to frameworks such as MITRE ATT&CK for Cloud

Benefits

Comp & perks

All full-time roles are eligible for an equity package in the form of stock options
Career development opportunities
Collaborative and innovative work environment
Health, vision, and dental insurance for you and your family
Flexible vacation policy
Generous parental leave
Inclusive culture
Remote and hybrid work models depending on role and location