Lead complex, intelligence-informed adversary emulations and develop offensive tooling for the organization’s IT security team.
Locations (3)
San Antonio, Texas, United States
Live Oak, Texas, United States
Texas, United States
Responsibilities
Lead complex, multi-domain adversary-emulation campaigns targeting critical services, high-value assets, privileged identities, cloud control planes, applications, data, and software delivery systems.
Translate threat intelligence and business context into campaign objectives, adversary profiles, attack hypotheses, target selections, techniques, success criteria, and measurable defensive outcomes.
Design engagement plans, rules of engagement, safety controls, communications, deconfliction, escalation paths, data-handling requirements, and technical workstreams.
Execute and supervise advanced attack activity involving stealth, persistence, identity compromise, lateral movement, cloud privilege escalation, application exploitation, data access, and objective demonstration.
Lead controlled social-engineering, physical, wireless, third-party, or assumed-breach scenarios when explicitly approved.
Requirements
Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
The Offensive Security Engineer III leads complex, intelligence-informed adversary emulations to test how well the organization’s people, processes, architecture, and technology withstand realistic multi-stage attacks.
Locations (2)
Live Oak, Texas, United States
Texas, United States
Responsibilities
Lead complex, multi-domain adversary-emulation campaigns targeting critical services, high-value assets, privileged identities, cloud control planes, applications, data, and software delivery systems.
Translate threat intelligence and business context into campaign objectives, adversary profiles, attack hypotheses, target selections, techniques, success criteria, and measurable defensive outcomes.
Design engagement plans, rules of engagement, safety controls, communications, deconfliction, escalation paths, data-handling requirements, and technical workstreams.
Execute and supervise advanced attack activity involving stealth, persistence, identity compromise, lateral movement, cloud privilege escalation, application exploitation, data access, and objective demonstration.
Lead the development of OCI-based attack capabilities for Horizon3.ai’s NodeZero platform.
Compensation
Base salary range: $206,278 - $242,680. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills. Additional compensation: All full-time roles are eligible for an equity package in the form of stock options.
Responsibilities
Conduct research into OCI attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques.
Design, implement, and validate production-quality Python attack capabilities spanning OCI IAM, service accounts and workload identities, compute, Kubernetes/OKE, storage, databases, secrets, networking, and other cloud-native services.
Chain individual weaknesses into realistic attack paths, with reliable proof of exploitability and clear, actionable customer outcomes.
Build and maintain safe, repeatable attack logic and supporting tests; investigate failures and improve reliability, precision, and maintainability.
Collaborate closely with software engineers, attack engineers, and offensive security SMEs to bring new capabilities into production.
IT Offensive Security Engineer IIIRandolph-Brooks Federal Credit Union · San Antonio, US+2 more
Senior Attack EngineerHorizon3 · Remote, US