Staff Attack Engineer

Job Summary

As the technical lead for internal network and Active Directory attack capabilities, the full-time Staff Attack Engineer will focus on researching and developing production-grade attack techniques for NodeZero, our autonomous pentesting platform, while working remotely.

Key responsibilities

• Serve as the primary subject matter expert for internal-network and Active Directory attack capabilities
• Research and translate emerging AD tradecraft into production attack content
• Design and maintain production-grade Python code to support attack capabilities at enterprise scale

Required qualifications

• Deep, hands-on offensive experience against Active Directory and internal enterprise networks
• Expertise in current AD tradecraft and experience with modern, hardened environments
• Strong software engineering fundamentals with expert-level Python and a track record of production-quality code
• Ability to independently research and become an expert in unfamiliar systems and technologies
• 8+ years of combined offensive security and/or software engineering experience focused on Active Directory and internal network attacks