Staff Attack Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Investigate Oracle Cloud Infrastructure services and pinpoint offensive security prospects throughout the platform

• Create innovative attack techniques, pathways, and security evaluations aimed at OCI environments

• Develop and sustain production-quality Python code that enhances NodeZero's attack functionalities

• Execute offensive security research on OCI compute, networking, storage, databases, IAM, Kubernetes, and cloud-native services

• Examine real-world OCI implementations to uncover prevalent attack vectors and customer risk trends

• Work collaboratively with software engineers, attack engineers, and offensive security subject matter experts to deploy new capabilities

• Document research results, attack strategies, and technical design choices

• Assist in prioritizing future OCI attack coverage based on customer needs and evolving threats

• Contribute to the strategic direction of NodeZero's cloud attack functionalities

⛳️ Requirements

• Practical offensive security experience focused on Oracle Cloud Infrastructure (OCI)

• In-depth understanding of cloud attack pathways and cloud-native security principles

• Experience in web application testing, cloud penetration testing, external assessments, or red team engagements

• Proficiency in writing Python code for automation, tooling, or offensive security processes

• Capability to independently investigate unfamiliar technologies and quickly become proficient

• Excellent written communication and technical documentation skills

• Enthusiasm for creating products, beyond merely identifying vulnerabilities

• 10+ years of professional experience in software engineering and/or offensive security

• Preferred: Experience with attacking OCI Kubernetes Engine (OKE)

• Preferred: Familiarity with cloud privilege escalation and identity attacks

🏝️ Benefits

• Health, vision & dental insurance for you and your family

• Flexible vacation policy

• Generous parental leave

• Equity package in the form of stock options

• Growth opportunities within a dynamic and growing team

• Collaborative environment that encourages creativity