Lead the development of GCP attack capabilities for Horizon3’s NodeZero platform, driving research, design, and production of offensive security tools.
Base salary range: $206,278 - $242,680. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills.
- Lead research into GCP attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques.
- Design, implement, and validate production-quality Python attack capabilities spanning GCP IAM, service accounts, workload identities, compute, Kubernetes/GKE, storage, databases, secrets, networking, and other cloud-native services.
- Chain individual weaknesses into realistic attack paths, with reliable proof of exploitability and clear, actionable customer outcomes.
- Set technical direction for GCP attack coverage, identify gaps, prioritize work with Product and Engineering, and translate research and customer needs into a sequenced roadmap.
- Build and maintain safe, repeatable attack logic and supporting tests; investigate failures and improve reliability, precision, and maintainability.
- Nice to have: cloud privilege escalation
- Nice to have: identity attacks
- Nice to have: AWS
- Nice to have: Azure
- Nice to have: OCI
- health insurance
- vision insurance
- dental insurance
- flexible vacation policy
- generous parental leave
