Staff Attack Engineer, Internal/AD

Horizon3.ai
United States
Workplace: RemoteFull timeUSD 247,000 - 275,000 annuallyFunction: Healthcare (Clinical, Medical, Wellness)Experience: 8+ yearsSkills: ["Technical leadership","Communication","Independent research","Mentoring"]

Lead internal-network and Active Directory attack capabilities in NodeZero, translating emerging AD tradecraft into safe, repeatable autonomous attack content. Own the technical direction, research roadmap, and subject-matter expertise for production attacks across modern hardened environments. Design and build production-grade Python at enterprise scale, stand up AD test environments, extend attack-path modeling, and mentor attack engineers while collaborating across engineering, product, and customer-facing teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Horizon3.ai
Horizon3.ai
4 days ago

Staff Attack Engineer, Internal/AD

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Lead internal-network and Active Directory attack capabilities in NodeZero, translating emerging AD tradecraft into safe, repeatable autonomous attack content. Own the technical direction, research roadmap, and subject-matter expertise for production attacks across modern hardened environments. Design and build production-grade Python at enterprise scale, stand up AD test environments, extend attack-path modeling, and mentor attack engineers while collaborating across engineering, product, and customer-facing teams.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Healthcare (Clinical, Medical, Wellness)
Seniority: Mid level

Key Responsibilities

  • •Serve as the technical lead and primary subject matter expert for NodeZero internal-network and Active Directory attack capabilities.
  • •Research emerging AD and internal tradecraft and turn it into production attack content, including management-plane and hybrid identity attack techniques.
  • •Design, build, and maintain production-grade Python that safely powers these capabilities at enterprise scale.
  • •Stand up and configure representative AD test environments to validate, demonstrate, and regression-test attack scenarios.
  • •Extend attack-path modeling and graph data models, set priorities and coverage roadmap from customer environments/threat intelligence, and mentor other attack engineers.
Travel: Low travel

Pay and Benefits

Salary: USD 247,000 - 275,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceVisionDentalEquityParental Leave

Key Requirements

  • •Deep, hands-on offensive experience against Active Directory and internal enterprise networks, from initial foothold through domain and enterprise compromise.
  • •Expert command of modern AD tradecraft, including credential access, Kerberos attacks, NTLM coercion/relay, AD Certificate Services abuse, ACL/GPO abuse, and lateral movement and persistence.
  • •Demonstrated experience attacking hardened environments with NTLM deprecation and enforced signing, Kerberos-only, and tiered administration.
  • •Expert-level Python skills and a track record of shipping and maintaining production-quality code (not just scripts or proofs of concept).
  • •Technical leadership through setting direction and mentoring engineers, plus strong written and verbal communication and independent research ability.
Experience:8+ yearsOffensive securitySoftware engineeringCybersecurity
Skills:Technical leadershipCommunicationIndependent researchMentoring
Certifications:OSCPOSEPCRTO
Tech Stack:PythonActive DirectoryAD Certificate ServicesSCCMConfigMgrKerberosNTLMBloodHoundImpacketNetexecNeo4j

Company Brief

Horizon3.ai
Builds NodeZero®, an autonomous penetration-testing platform that continuously finds, prioritizes, and verifies exploitable vulnerabilities across on-premises, cloud, and hybrid environments to help organizations reduce security risk.
Industry: Cybersecurity
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Funding: Series D
Headquarters: San Francisco, United States
Founded: 2019
Glassdoor
Glassdoor: 4.9
WebsiteLinkedInGlassdoor