Senior Attack Engineer, GCP

Horizon3.ai

. Research GCP attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques .

Posted 11/6/2026full-timeRemote • United StatesSenior💰 $206,278 - $242,680 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates deep expertise in GCP security and offensive cloud operations, with strong Python engineering skills and the ability to translate security research into production-quality automation. Proven experience in cloud penetration testing, IAM permissions, and integrating security research into software development.

Highest-signal resume keywords

GCP Security ExpertisePython Engineering SkillsCloud Penetration TestingIAM Permissions ReasoningKubernetes/GKE Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Python ProgrammingCloud Penetration TestingOffensive Security ResearchIAM Permissions ManagementCloud Privilege EscalationGKEKubernetesTerraformGcloudGoogle Cloud APIs

Soft Skills

Strong Written CommunicationCollaboration with EngineersMentoring EngineersClear Communication with Partners

Tools & Technologies

GCPAWSAzureOCICloud-Native CI/CD

Industry Keywords

Cloud Attack PathsCloud-Native Security ConceptsMITRE ATT&CK for CloudVulnerability DisclosureOpen-Source Contributions

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesPythonTerraform

About the role

Key responsibilities & impact

Research GCP attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques
Design, implement, and validate production-quality Python attack capabilities across GCP IAM, service accounts, workload identities, compute, Kubernetes/GKE, storage, databases, secrets, networking, and other cloud-native services
Chain individual weaknesses into realistic attack paths with reliable proof of exploitability and actionable customer outcomes
Set technical direction for GCP attack coverage and prioritize work with Product and Engineering
Translate research and customer needs into a sequenced roadmap
Build and maintain safe, repeatable attack logic and supporting tests
Investigate failures and improve reliability, precision, and maintainability
Collaborate with software engineers, attack engineers, and offensive security SMEs to bring capabilities into production
Document research findings, attack methodologies, and technical design decisions
Review designs and code, share domain expertise, and mentor other engineers
Contribute to internal enablement and, where appropriate, external research or technical content

Requirements

What you’ll need

Deep hands-on experience with GCP security and offensive cloud operations
Ability to reason about IAM permissions, service identities, trust, and resource access
Expert understanding of cloud attack paths and cloud-native security concepts
Strong Python engineering skills
Experience turning security research or manual techniques into dependable production-quality automation or product capabilities
10+ years of professional software engineering and/or offensive security experience
Experience with cloud penetration testing, red teaming, offensive security research, or building cloud security products
Experience owning ambiguous technical work, making sound trade-offs, and communicating clearly with technical and non-technical partners
Strong written communication and documentation skills
Experience with cloud privilege escalation and identity attacks
Familiarity with AWS, Azure, or OCI offensive security
Experience integrating security research into production software
Experience with GKE, Kubernetes, Terraform, gcloud, Google Cloud APIs, or cloud-native CI/CD
Contributions to security research, open-source projects, conference talks, or vulnerability disclosure
Experience mapping cloud attack coverage to frameworks such as MITRE ATT&CK for Cloud
Legal authorization to work in the United States

Benefits

Comp & perks

Equity package in the form of stock options for all full-time roles
Health, vision, and dental insurance for you and your family
Flexible vacation policy
Generous parental leave
Career development opportunities
Inclusive and collaborative culture
Fully remote work arrangement
Up to 10% travel