Senior Attack Engineer, GCP

Role overview

Lead the development of offensive security capabilities for Google Cloud environments. The work spans cloud security research, attack-path design, and production-quality automation, with responsibility for shaping coverage priorities and turning validated findings into clear customer evidence.

Responsibilities - Research attack paths involving cloud identities, trust relationships, service configurations, and emerging techniques. - Build and validate Python capabilities across cloud permissions, service identities, compute, Kubernetes, storage, databases, secrets, and networking. - Combine weaknesses into realistic attack paths and provide safe, repeatable evidence of their impact. - Set technical priorities with product and engineering partners, from identifying coverage gaps to planning delivery. - Improve reliability and maintainability, document methods and design decisions, and review code and designs. - Share expertise and mentor engineers developing cloud attack content.

Requirements - Deep practical experience with cloud security and offensive cloud operations, including identity, permissions, trust, and resource access. - Strong understanding of cloud attack paths and cloud-native security. - Strong Python skills and experience turning security research or manual techniques into dependable product capabilities. - At least 10 years of professional software engineering and/or offensive security experience. - Experience in cloud penetration testing, red teaming, offensive security research, or related work. - Ability to lead technical work and communicate findings clearly.

Benefits and work setup

The role is remote. The source lists a base salary range of $206,278–$242,680, stock options for full-time employees, health and dental coverage, flexible vacation, and parental leave.