Staff Attack Engineer, External
Horizon3.ai
Posted: 10/19/2026AWSCloudDNSPython
Project Engineer, Diver
Marine Solutions, Inc.
Posted: 10/19/2026
Virtualization Engineer
Bright Vision Technologies
Posted: 10/19/2026CloudKubernetesVMware
Associate Substation Engineer
E2 Consulting Engineers, Inc.
Posted: 10/19/2026
Refrigeration Engineer
New York University Tisch School of the Arts
Posted: 10/19/2026Refrigeration Engineer
New York University Tisch School of the Arts
Posted: 10/19/2026
Industrial Wastewater Process Engineer
Arcadis
Posted: 10/19/2026
RF Engineer
Mission Technologies, a division of HII
Posted: 10/19/2026Flux
Network Firewall Engineer
Booz Allen Hamilton
Posted: 10/19/2026CloudCyber SecurityFirewallsLinuxTypeScript
Global Automation Project Engineer
CHEP
Posted: 10/19/2026IoTPMP
Senior Attack Engineer, External
Horizon3.ai
Posted: 10/19/2026AWSCloudDNSPython
Activation Engineer
Stedi
Posted: 10/19/2026
Process Modeling Engineer
Zero Carbon Systems
Posted: 10/19/2026PythonVBA
Observability Forward Deployed Engineer
Truist
Posted: 10/19/2026CloudGrafanaJavaKubernetesMicroservicesPythonSplunkGo.NET
Process Optimization Engineer – On-site
Truist
Posted: 10/19/2026ITSMServiceNow
Preconstruction Engineer
FTI
Posted: 10/19/2026
Unified Collaboration Engineer
Verizon
Posted: 10/19/2026UnityVoIP
Tier II Engineer
On Call Compliance Solutions
Posted: 10/19/2026AzureCyber SecurityDNSFirewallsTCP/IPWordPress
Senior Commodity Engineer – Raw Materials
BLUE ORIGIN
Posted: 10/19/2026Unified Collaboration Engineer
Verizon
Posted: 10/19/2026UnityVoIP
Staff Attack Engineer, External
Horizon3.aiCore Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in offensive security, focusing on reconnaissance, data parsing, and automation of attack workflows. Proficient in Python programming and capable of building scalable, production-quality tools while mentoring teams and producing clear documentation.
Highest-signal resume keywords
Offensive Security ExperiencePython ProgrammingData Parsing and EnrichmentAutomated Attack WorkflowsMentoring Attack Engineers
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Design, build, and maintain highly scalable reconnaissance workflows in production-grade Python
- Research, explore, and parse large volumes of external-facing data into accurate, actionable information
- Develop parsing and enrichment for free-form banners, web content, documents, and error output
- Collect, store, and connect high volumes of information
- Extend attack-path modeling and graph data models for identity, privilege, and relationship paths
- Traverse identity relationships across accounts, tenants, SSO and federation, exposed credentials, and third-party services
- Automate multi-step attack workflows from discovery and credential access through initial access and post-exploitation
- Research emerging external tradecraft and turn it into production attack content
- Maintain representative test environments for validating and regression-testing attack scenarios
- Build for production safety and scale while respecting target environments, rate limits, and scope
- Set priorities and coverage roadmaps using customer environments, threat intelligence, and emerging techniques
- Mentor and level up attack engineers
- Collaborate with engineers, product managers, and customer-facing teams
- Author internal documentation and external research and blog posts
Requirements
What you’ll need- Deep, hands-on offensive experience against external attack surfaces, from reconnaissance through initial access and post-exploitation
- 10+ years of hands-on experience in offensive security, security research, or security-focused software engineering
- Recent experience building and shipping offensive tooling
- Experience building reconnaissance and discovery systems that run at scale
- Strong skill researching and parsing large amounts of messy, unstructured external data
- Experience collecting, storing, and connecting high volumes of data and reasoning about relationships such as identities, assets, and trust
- Command of identity-focused tradecraft, including credential access, password and token attacks, SSO and federation weaknesses, and movement among identities, tenants, and services
- Experience automating multi-step attack workflows end to end
- Strong software engineering fundamentals with Python and a track record of shipping and maintaining production-quality code
- Ability to independently research unfamiliar systems and technologies
- Strong written and verbal communication, including clear technical documentation
- Passion for building products, not just finding vulnerabilities
- OSCP, OSEP, CRTO, or equivalent offensive certification is an advantage
- Experience with certificate transparency, passive DNS, and internet-wide scanning is an advantage
- Experience with cloud, SaaS, and hybrid identity attack surfaces, including Entra ID, Okta, AWS, and on-premises-to-cloud pivots is an advantage
- Experience with external-to-internal pivoting is an advantage
- Experience with graph databases, attack-path analysis, data lakes, and high-volume data storage and processing is an advantage
- Experience developing or contributing to offensive or reconnaissance tooling is an advantage
- Public contributions such as open-source tools, technical blog posts, conference talks, or published CVEs are an advantage
- Experience building production-safe autonomous or automated offensive tooling is an advantage
- Legally authorized to work in the United States
Benefits
Comp & perks- Equity package in the form of stock options for all full-time roles
- Health, vision and dental insurance for you and your family
- Flexible vacation policy
- Generous parental leave
- Career development opportunities
- Collaborative and innovative work environment
- Fully remote work arrangement
- Up to 5% travel
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Offensive SecurityData Collection and StorageReconnaissance SystemsAttack-Path ModelingGraph DatabasesProduction-Quality CodeCredential Access TechniquesMulti-Step Workflow AutomationExternal Data ParsingIdentity Tradecraft
Soft Skills
Strong CommunicationTechnical DocumentationCollaboration
Tools & Technologies
AWSOktaEntra IDCloud IdentitySaaSGraph DatabasesData LakesAutomated Tooling
Certifications & Qualifications
OSCPOSEPCRTO
Industry Keywords
Reconnaissance WorkflowsExternal Attack SurfacesThreat IntelligenceIdentity RelationshipsCredential AccessSSO and FederationInternet-Wide ScanningOpen-Source Contributions