Senior/Staff Attack Engineer, Rapid Response

Horizon3.ai

. Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, cloud environments, and infrastructure .

Posted 10/7/2026full-timeRemote • United StatesSenior💰 $230,000 - $275,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability research, penetration testing, and exploit development, with strong proficiency in Python and experience in enterprise environments. Capable of automating manual techniques and validating security controls while collaborating effectively with cross-functional teams.

Highest-signal resume keywords

Python ProgrammingPenetration TestingVulnerability ResearchExploit DevelopmentCloud Environments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ReproductionAutomated Exploit CapabilitiesIncident ResponseThreat HuntingReverse EngineeringMalware AnalysisCVE AnalysisN-Day ResearchZero-Day ResearchCTF Experience

Soft Skills

Strong OwnershipJudgmentCommunication Skills

Tools & Technologies

AWSAzureGCPKubernetesActive DirectoryEntra IDOkta

Certifications & Qualifications

OSCP

Industry Keywords

Enterprise NetworksIdentity SystemsSecurity OperationsPurple TeamingAttack Chains

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesPython

About the role

Key responsibilities & impact

Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, cloud environments, and infrastructure
Study attacker tactics, techniques, procedures, and campaigns observed in the wild
Turn vulnerability research and real-world attacker behavior into safe, repeatable proof-of-exploit capabilities, attack paths, and automated modules for Rapid Response and NodeZero
Demonstrate realistic impact, including privilege escalation, credential access, lateral movement, persistence, and data access, without unnecessary disruption
Validate remediation and containment by safely retesting vulnerabilities and security controls
Improve execution speed, reliability, observability, and evidence quality
Collaborate with research, product, and engineering teams
Help security teams rapidly validate exposure, prioritize remediation, and verify that defenses are working

Requirements

What you’ll need

Strong Python and software engineering skills, including experience building, testing, and operating production-quality tooling
Solid penetration testing, vulnerability research, and exploit-development fundamentals
Hands-on experience with enterprise networks, applications, identity systems, cloud environments, or endpoint security
Demonstrated ability to reproduce vulnerabilities and convert manual techniques into reliable automation
Understanding of common attack chains, trust boundaries, authentication and authorization, privilege escalation, and lateral movement
Ability to balance speed, safety, reliability, coverage, and actionable evidence
Strong ownership, judgment, and communication skills in ambiguous or time-sensitive situations
Experience with CISA KEVs, CVE analysis, N-Day research, Zero-Day research, or responsible disclosure is desirable
Background in incident response, threat hunting, purple teaming, or security operations is desirable
Experience with AWS, Azure, GCP, Kubernetes, Active Directory, Entra ID, Okta, or hybrid environments is desirable
Experience with exploit development, reverse engineering, malware analysis, or vulnerability research is desirable
Contributions to security research, CVEs, conference talks, open-source tools, or technical publications are desirable
CTF experience or equivalent hands-on offensive security practice is desirable
Bachelor’s Degree in Computer Science, Computer Engineering or related field is desirable
OSCP or equivalent certifications are desirable
Legally authorized to work in the United States
Must not require employment visa sponsorship now or in the future

Benefits

Comp & perks

Equity package in the form of stock options for all full-time roles
Health insurance for you and your family
Vision insurance for you and your family
Dental insurance for you and your family
Flexible vacation policy
Generous parental leave
Career development opportunities
Inclusive and collaborative work culture
Fully remote work arrangement
Up to 10% travel