Senior Attack Engineer, External

Role overview

Build and advance autonomous capabilities for discovering and safely validating external attack paths across large, complex environments. The work turns manual reconnaissance and multi-step security testing into scalable, repeatable workflows, with a focus on the connections among internet-facing assets, identities, credentials, and services. You will own substantial technical workstreams, contribute to research priorities, and help raise engineering standards across the team.

Responsibilities - Develop and maintain scalable Python workflows to discover, enumerate, and fingerprint externally exposed assets and services. - Parse and enrich inconsistent data, such as banners, web content, documents, and error output, to produce accurate findings. - Connect high-volume information and extend graph models to represent identity, privilege, and relationship paths. - Automate end-to-end attack scenarios, linking discovery, credential access, initial access, and post-exploitation into safely validated paths. - Research emerging techniques and turn them into production capabilities; maintain representative environments for validation and regression testing. - Build with production safety and scale in mind, respecting target scope and rate limits; mentor teammates and contribute to priorities and team standards.

Requirements - Strong production Python experience and the ability to build reliable systems for large, varied datasets. - Expertise in external attack surface research, reconnaissance, and offensive security techniques. - Ability to reason about identity relationships, exposed credentials, and multi-step paths from exposure to compromise. - Experience turning research or manual techniques into robust, automated production workflows. - Judgment to validate attack scenarios safely and account for scope, rate limits, and customer environments. - Ability to lead complex work independently and support the growth of other engineers.

Benefits and work setup - Remote and hybrid arrangements are available depending on role and location; some office-based roles may require regular in-person attendance. - Full-time roles include stock options. The source also lists health, vision, and dental coverage, flexible vacation, parental leave, and career development opportunities.