Senior Attack Engineer, Kubernetes

This is a fully remote position, open to applicants in United States.

📋 Description

• Spearhead offensive security research focused on Kubernetes clusters, workloads, identities, configurations, and cloud-connected settings.

• Design and develop production-grade Python attack capabilities that simulate realistic attacker scenarios, including an assumed-breach foothold in a pod or workload.

• Create and verify attack paths that involve Kubernetes RBAC, service accounts and credentials, workloads and pods, secrets, cluster and node boundaries, network reachability, cloud identities, and managed Kubernetes services.

• Evaluate Kubernetes security vulnerabilities and assess their potential for significant, verifiable impact.

• Incorporate safe validation and negative testing into capabilities.

• Lead the technical planning of major Kubernetes initiatives, identify coverage gaps, prioritize research, make design trade-offs, and synchronize delivery with Product, platform, and engineering collaborators.

• Integrate attack content into NodeZero's execution and results pipelines to ensure customers receive dependable evidence and clear explanations.

• Review code and designs, set quality standards, mentor colleagues, and share expertise in Kubernetes offensive security.

• Document methodologies, assumptions, limitations, and testing approaches.

• Support internal and external technical enablement as appropriate.

• Drive the development of Kubernetes attack capabilities in NodeZero and help shape Horizon3's offensive security strategy for Kubernetes.

⛳️ Requirements

• Extensive hands-on experience with Kubernetes security and offensive testing of containerized environments.

• In-depth understanding of Kubernetes architecture and identity and authorization controls, particularly RBAC, service accounts, workloads, and cluster boundaries.

• Proficient Python engineering skills and experience transforming security research into reliable automation.

• Background in penetration testing, red teaming, vulnerability research, container security, or offensive security tools.

• Capability to lead complex, cross-functional technical projects and articulate attack paths and their impacts clearly.

• Strong focus on safety and product considerations.

• Proven track record of managing intricate technical projects and making informed trade-offs.

• Excellent written communication and documentation abilities.

• Familiarity with EKS, GKE, AKS, OKE, or other managed Kubernetes services.

• Knowledge of Linux, containers, cloud workload identity, Kubernetes operators, Helm, or infrastructure as code.

• Experience with network attack paths, container escape research, or cloud-to-cluster attack strategies.

• Contributions to open-source security tools, public research, conference presentations, or vulnerability disclosures.

• Must possess legal authorization to work in the United States.

• Must not require employment visa sponsorship now or in the future.

🏝️ Benefits

• Equity package in the form of stock options for all full-time roles.

• Health insurance coverage for you and your family.

• Vision insurance for you and your family.

• Dental insurance for you and your family.

• Flexible vacation policy.

• Generous parental leave.

• Career development opportunities.

• Inclusive culture.

• Collaborative environment.

• Remote and hybrid work models available depending on role and location.