Software Engineer with a strong application security background to support remediation of vulnerabilities across applications, primarily in Azure environments, using AI-assisted development tools.
Responsibilities
Review vulnerability findings generated through application and code scanning tools
Analyze security findings and determine the appropriate technical remediation approach
Modify application code to remediate identified security vulnerabilities
Address issues involving dependency and package vulnerabilities, API vulnerabilities, missing or flawed authentication and authorization, secrets or credentials embedded within application or service code, cloud and application configuration vulnerabilities
Apply patches and other application security fixes based on identified findings
Requirements
Nice to have: Azure-hosted applications
Nice to have: mobile applications
Nice to have: security remediation across both backend services and user interfaces
Nice to have: supporting vulnerability remediation across multiple applications or codebases
Lead offensive security research to develop and tune detection logic for AI-driven SDLC, collaborating with engineers, researchers, and AI/data scientists.
Responsibilities
Push modern AppSec forward by building and breaking detection logic
Collaborate with engineers, researchers, and AI/data scientists on next-generation detection
Take research ideas from prototype to production with minimal guidance
Explain complex attack paths to engineers and product managers
The Security Research group is hiring a senior, hands‑on Application Security Researcher to push modern AppSec forward—working with engineers, researchers and AI/data scientists on next‑generation detection, including autonomous, agentic pen‑testing capabilities.
Responsibilities
Push modern AppSec forward
Work with engineers, researchers and AI/data scientists on next‑generation detection
Build and break security solutions
Translate research ideas from prototype to production
Communicate complex attack paths to engineers and product managers
Requirements
M.Sc. in Computer Science, Cyber Security, or a related field
The Security Research group is hiring a senior, hands-on Application Security Researcher to push modern AppSec forward — working with engineers, data scientists on next-generation detection, including autonomous, agentic capabilities.
Responsibilities
Secure the AI-driven SDLC from prompt to production
Unify development and cloud context to stop vulnerabilities at the source
Work with engineers and data scientists on next-generation detection
Lead technical standards for machine identity, secrets, and PKI, including certificate authority design, post-quantum planning, and automating non-human identity management.
Compensation
$210,000—$270,000 USD
Responsibilities
Build the non-human identity register covering cloud service accounts, CI credentials, API keys, tokens, and certificates
Replace static, long-lived credentials with short-lived workload identity using GitHub Actions OIDC, cloud workload identity federation, Kubernetes service account tokens, and SPIFFE/SPIRE
Own Nscale's PKI and lead implementation of a certificate lifecycle management platform
Automate issuance and renewal using ACME, cert-manager, and EST/SCEP
Implement device certificates for managed endpoints
Looking for a Senior Infrastructure Engineer to help build and evolve the systems that products and engineering teams depend on every day, covering cloud infrastructure, deployment, observability, reliability, networking, security, and developer tooling.
Responsibilities
Designing and evolving cloud infrastructure on GCP
Building reliable deployment and CI/CD systems
Improving observability across services, infrastructure, and production workloads
Building tooling that makes engineers faster and reduces operational overhead
Improving reliability, scalability, and resilience across systems
Requirements
Nice to have: Experience supporting data-intensive or machine learning systems
Lead the development of GCP attack capabilities for Horizon3’s NodeZero platform, driving research, design, and production of offensive security tools.
Compensation
Base salary range: $206,278 - $242,680. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills.
Responsibilities
Lead research into GCP attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques.
Design, implement, and validate production-quality Python attack capabilities spanning GCP IAM, service accounts, workload identities, compute, Kubernetes/GKE, storage, databases, secrets, networking, and other cloud-native services.
Chain individual weaknesses into realistic attack paths, with reliable proof of exploitability and clear, actionable customer outcomes.
Set technical direction for GCP attack coverage, identify gaps, prioritize work with Product and Engineering, and translate research and customer needs into a sequenced roadmap.
Build and maintain safe, repeatable attack logic and supporting tests; investigate failures and improve reliability, precision, and maintainability.
Senior Application Security ResearcherNewCommit (formerly Comm-IT) · Poland
Senior Staff Machine Identity and PKI EngineerNewNscale · Remote, US
Senior Infrastructure EngineerNeweComID · Stockholm, Sweden
Senior Attack Engineer, GCPHorizon3 · Remote, US