jobapplier

Senior/Staff Attack Engineer (Rapid Response)

Horizon3

Skills

Required

  • exploit development / reverse engineering / malware analysis / vulnerability research
  • enterprise networks, applications / identity systems / cloud environments / endpoint security
  • CISA
  • CVE analysis
  • N-Day research
  • Zero-Day research
  • incident response / threat hunting / purple teaming / security operations
  • AWS
  • Azure
  • GCP
  • Kubernetes
  • Directory

Preferred

  • OSCP
  • turn vulnerability research
  • validating exposure
  • verifying defenses
  • Python

Join our team as a Senior/Staff Attack Engineer for our Rapid Response product. In this role, you will research and productize real-world exploitation techniques, helping customers understand the impact of newly disclosed or actively exploited vulnerabilities.

About Horizon3

This is not a traditional consulting or manual pentesting role, and you will have the opportunity to make a significant impact in the field of cybersecurity.

Responsibilities

  • You will focus on high-consequence vulnerabilities and turn vulnerability research into automated attack capabilities.
  • Your work will assist security teams in validating exposure, prioritizing remediation, and verifying defenses.
  • Research and productize real-world exploitation techniques to help customers understand vulnerabilities.
  • Turn vulnerability research and attacker tradecraft into safe, repeatable, automated attack capabilities.
  • Collaborate with research, product, and engineering teams to improve execution speed, reliability, and evidence quality.
  • Solid penetration testing, vulnerability research, and exploit-development fundamentals
  • Strong Python and software engineering skills, including experience building, testing, and operating production-quality tooling
  • Understanding of common attack chains, trust boundaries, authentication and authorization, privilege escalation, and lateral movement
  • Demonstrated ability to reproduce vulnerabilities and convert manual techniques into reliable automation

Requirements

  • Curiosity about how attackers exploit newly disclosed vulnerabilities and how defenders can validate exposure quickly
  • Strong ownership, judgment, and communication skills in ambiguous or time-sensitive situations
  • Hands-on experience with enterprise networks, applications, identity systems, cloud environments, or endpoint security
  • Ability to balance speed, safety, reliability, coverage, and actionable evidence
  • Experience with CISA KEVs, CVE analysis, N-Day research, Zero-Day research, or responsible disclosure
  • Background in incident response, threat hunting, purple teaming, or security operations
  • Experience with AWS, Azure, GCP, Kubernetes, Active Directory, Entra ID, Okta, or hybrid environments
  • Contributions to security research, CVEs, conference talks, open-source tools, or technical publications
  • Experience with exploit development, reverse engineering, malware analysis, or vulnerability research
  • CTF experience or equivalent hands-on offensive security practice
  • Bachelor’s Degree in Computer Science, Computer Engineering or related field

Preferred

  • OSCP (Offensive Security Certified Professional) or equivalent certifications

Pay

USD 200,000 - 275,000