Senior Attack Engineer, Internal Systems

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct research and develop innovative attack capabilities for incorporation into the NodeZero autonomous pentesting platform.

• Investigate emerging internal tradecraft and transform it into operational attack content.

• Design, construct, and sustain production-quality Python systems.

• Balance attack effectiveness with operational safety, reliability, scalability, and maintainability.

• Acquire, set up, and exploit hardened internal test environments.

• Monitor vulnerability databases and threat intelligence sources.

• Extend platform architecture and enhance graph data models for identity, privilege escalation, and lateral movement pathways.

• Prioritize coverage based on customer needs, threat intelligence, and new techniques.

• Define deliverable projects and proactively address risks and trade-offs.

• Mentor teammates and enhance processes, code quality, architectural standards, and research safety practices.

• Collaborate with engineers, product managers, and customer-facing teams to resolve issues, enhance features, prepare documentation, and deliver customer value.

• Independently lead intricate internal network and Active Directory attack initiatives from research and technical design to production delivery and ongoing operation.

⛳️ Requirements

• Extensive, hands-on offensive security experience with internal enterprise networks and Active Directory, from initial access to domain and enterprise compromise.

• Expert-level proficiency in Python with a proven history of delivering and maintaining tested, documented, production-quality code.

• Strong expertise in network protocol exploitation, privilege escalation, lateral movement, and credential access.

• Experience with object-oriented design, API integration, data structures, and scalable system components.

• Proven experience designing complex software components or systems with considerations for extensibility, operational safety, performance, and long-term maintenance.

• History of independently managing complex, high-impact technical projects and making informed decisions amidst ambiguity.

• Excellent written and verbal communication skills, with the ability to produce technical documentation and articulate design choices, risks, and trade-offs.

• Experience in mentoring colleagues and enhancing team processes, tools, or technical standards.

• Background in offensive security and software engineering, with a passion for converting security research into product capabilities.

• OSCP, OSEP, CRTO, or equivalent offensive certifications are preferred.

• Familiarity with SCCM, Windows Admin Center, Docker, Kubernetes, Postgres, Neo4j, BloodHound, Impacket, or netexec is preferred.

• Experience with graph databases and attack-path analysis is preferred.

• Experience integrating security research into multi-tenant SaaS production environments is preferred.

• Public contributions such as open-source tools, technical blogs, conference presentations, or published CVEs are preferred.

• Experience creating production-safe autonomous or automated offensive tools, including AI/LLM applications, is preferred.

• Must be legally authorized to work in the United States.

🏝️ Benefits

• Equity package in the form of stock options for all full-time positions.

• Health, vision, and dental insurance coverage for you and your family.

• Flexible vacation policy.

• Generous parental leave.

• Opportunities for career development.

• A collaborative environment that encourages creativity and innovative thinking.

• Remote and hybrid work options based on role and location.

• An inclusive culture.

• Up to 10% travel.