Senior Attack Engineer, External
Horizon3.ai
Posted: 10/19/2026AWSCloudDNSPython
Project Engineer, Diver
Marine Solutions, Inc.
Posted: 10/19/2026
Virtualization Engineer
Bright Vision Technologies
Posted: 10/19/2026CloudKubernetesVMware
Associate Substation Engineer
E2 Consulting Engineers, Inc.
Posted: 10/19/2026
Refrigeration Engineer
New York University Tisch School of the Arts
Posted: 10/19/2026Refrigeration Engineer
New York University Tisch School of the Arts
Posted: 10/19/2026
Industrial Wastewater Process Engineer
Arcadis
Posted: 10/19/2026
RF Engineer
Mission Technologies, a division of HII
Posted: 10/19/2026Flux
Network Firewall Engineer
Booz Allen Hamilton
Posted: 10/19/2026CloudCyber SecurityFirewallsLinuxTypeScript
Global Automation Project Engineer
CHEP
Posted: 10/19/2026IoTPMP
Staff Attack Engineer, External
Horizon3.ai
Posted: 10/19/2026AWSCloudDNSPython
Activation Engineer
Stedi
Posted: 10/19/2026
Process Modeling Engineer
Zero Carbon Systems
Posted: 10/19/2026PythonVBA
Observability Forward Deployed Engineer
Truist
Posted: 10/19/2026CloudGrafanaJavaKubernetesMicroservicesPythonSplunkGo.NET
Process Optimization Engineer – On-site
Truist
Posted: 10/19/2026ITSMServiceNow
Preconstruction Engineer
FTI
Posted: 10/19/2026
Unified Collaboration Engineer
Verizon
Posted: 10/19/2026UnityVoIP
Tier II Engineer
On Call Compliance Solutions
Posted: 10/19/2026AzureCyber SecurityDNSFirewallsTCP/IPWordPress
Senior Commodity Engineer – Raw Materials
BLUE ORIGIN
Posted: 10/19/2026Unified Collaboration Engineer
Verizon
Posted: 10/19/2026UnityVoIP
Senior Attack Engineer, External
Horizon3.aiCore Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in offensive security, particularly in building and maintaining scalable reconnaissance workflows using Python. Proficient in automating multi-step attack workflows and analyzing large volumes of unstructured data to derive actionable insights.
Highest-signal resume keywords
Offensive Security ExperiencePython ProgrammingData Parsing and EnrichmentAutomated Attack WorkflowsIdentity-Focused Tradecraft
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Design, build, and maintain highly scalable reconnaissance workflows in production-grade Python
- Research, explore, and parse large volumes of external-facing data into accurate, actionable information
- Develop parsing and enrichment for unstructured banners, web content, documents, and error output
- Collect, store, and connect high volumes of information
- Extend attack-path modeling and graph data models for identity, privilege, and relationship paths
- Traverse external identity relationships across accounts, tenants, SSO, federation, exposed credentials, and third-party services
- Automate multi-step attack workflows from discovery through credential access, initial access, and post-exploitation
- Research emerging external tradecraft and turn it into production attack content
- Maintain representative test environments for attack-scenario validation and regression testing
- Build production-safe workflows respecting target environments, rate limits, and scope
- Contribute to priorities and coverage roadmaps using customer environments, threat intelligence, and emerging techniques
- Mentor teammates and help define engineering standards
- Collaborate with engineers, product managers, and customer-facing teams
- Author internal documentation and external research and blog posts
Requirements
What you’ll need- Deep, hands-on offensive experience against external attack surfaces, from reconnaissance through initial access and post-exploitation
- 5+ years of hands-on experience in offensive security, security research, and/or security-focused software engineering
- Recent experience building and shipping offensive tooling
- Experience building reconnaissance and discovery systems that run at scale
- Strong skill researching and parsing large amounts of messy, unstructured external data
- Experience collecting, storing, and connecting high volumes of data and reasoning about identities, assets, and trust relationships
- Command of identity-focused tradecraft, including credential access, password and token attacks, SSO and federation weaknesses, and movement among identities, tenants, and services
- Experience automating multi-step attack workflows end to end
- Strong software engineering fundamentals with Python
- Track record of shipping and maintaining production-quality code
- Ability to independently research unfamiliar systems and technologies
- Strong written and verbal communication and technical documentation skills
- Passion for building products
- OSCP, OSEP, CRTO, or equivalent offensive certifications are advantageous
- Experience with certificate transparency, passive DNS, and internet-wide scanning
- Experience with cloud, SaaS, and hybrid identity attack surfaces, including Entra ID, Okta, and AWS
- Experience with external-to-internal pivoting
- Experience with graph databases, attack-path analysis, data lakes, and high-volume data processing
- Experience developing or contributing to offensive or reconnaissance tooling
- Public contributions such as open-source tools, technical blog posts, conference talks, or published CVEs
- Experience building production-safe autonomous or automated offensive tooling
- Legally authorized to work in the United States
Benefits
Comp & perks- Equity package in the form of stock options for all full-time roles
- Health, vision & dental insurance for you and your family
- Flexible vacation policy
- Generous parental leave
- Career development opportunities
- Inclusive and collaborative culture
- Remote work
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Offensive SecurityData Collection and StorageReconnaissance Systems DevelopmentGraph DatabasesHigh-Volume Data ProcessingProduction-Quality Code MaintenanceAutomated Tooling DevelopmentAttack-Path AnalysisCredential Access TechniquesSSO and Federation Weaknesses
Soft Skills
Strong Communication SkillsMentoringTechnical Documentation
Tools & Technologies
AWSEntra IDOktaCertificate TransparencyPassive DNS
Certifications & Qualifications
OSCPOSEPCRTO
Industry Keywords
External Attack SurfacesIdentity RelationshipsThreat IntelligenceAttack ScenariosOpen-Source Contributions