SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 230,000 - 275,000 / annual
Horizon3.ai is a fast-growing remote cybersecurity company building NodeZero, an autonomous pentesting platform that helps organizations proactively discover and verify exploitable attack vectors before criminals exploit them. The platform is used by ITOps/SecOps teams, consulting pentesters, and MSSPs across organizations of all sizes, from educational institutions to Global 100 enterprises.
You will join the Rapid Response team as a Senior Attack Engineer, focusing on researching and productizing real-world exploitation techniques for high-consequence vulnerabilities. Your mission is to turn vulnerability research and attacker tradecraft into safe, repeatable, automated attack capabilities that help security teams rapidly validate exposure, prioritize remediation, and verify that defenses are working.
Key responsibilities include:
- Research and reproduce high-consequence vulnerabilities across enterprise networks, applications, identity systems, cloud environments, and infrastructure—including CISA KEVs, CVEs, N-Days, and Zero-Days
- Study attacker tactics, techniques, procedures, and campaigns observed in the wild
- Convert vulnerability research and real-world attacker behavior into safe, repeatable proof-of-exploit capabilities and automated modules
- Demonstrate realistic impact (privilege escalation, credential access, lateral movement, persistence, data access) without unnecessary disruption
- Validate remediation and containment by safely retesting vulnerabilities and security controls
- Improve execution speed, reliability, observability, and evidence quality while collaborating with research, product, and engineering teams
The role is fully remote with up to 10% travel required. Horizon3 offers competitive compensation, equity packages, comprehensive benefits (health, vision, dental insurance), flexible vacation, and generous parental leave.
REQUIREMENTS:
- Strong Python and software engineering skills, including experience building, testing, and operating production-quality tooling
- Solid penetration testing, vulnerability research, and exploit-development fundamentals
- Hands-on experience with enterprise networks, applications, identity systems, cloud environments, or endpoint security
- Demonstrated ability to reproduce vulnerabilities and convert manual techniques into reliable automation
- Understanding of common attack chains, trust boundaries, authentication and authorization, privilege escalation, and lateral movement
- Ability to balance speed, safety, reliability, coverage, and actionable evidence
- Curiosity about how attackers exploit newly disclosed vulnerabilities and how defenders can validate exposure quickly
- Strong ownership, judgment, and communication skills in ambiguous or time-sensitive situations
NICE TO HAVE:
- Experience with CISA KEVs, CVE analysis, N-Day research, Zero-Day research, or responsible disclosure
- Background in incident response, threat hunting, purple teaming, or security operations
- Experience with AWS, Azure, GCP, Kubernetes, Active Directory, Entra ID, Okta, or hybrid environments
- Experience with exploit development, reverse engineering, malware analysis, or vulnerability research
- Contributions to security research, CVEs, conference talks, open-source tools, or technical publications
- CTF experience or equivalent hands-on offensive security practice
- Bachelor's Degree in Computer Science, Computer Engineering or related field
- OSCP (Offensive Security Certified Professional) or equivalent certifications
