Senior Attack Engineer, OCI

Role overview

Build new offensive security capabilities for assessing Oracle Cloud Infrastructure environments. The role combines cloud security research with production Python engineering: uncovering realistic attack paths, validating exploitability, and turning findings into reliable assessments that provide actionable results.

Responsibilities

- Research OCI attack paths, identity and trust relationships, service misconfigurations, and emerging attacker techniques. - Develop and validate Python capabilities across cloud identity, compute, Kubernetes, storage, databases, secrets, networking, and related services. - Link individual weaknesses into realistic attack paths and demonstrate their exploitability safely. - Maintain repeatable attack logic and supporting tests; investigate failures and improve reliability and precision. - Work with software engineers and offensive security specialists to bring capabilities into production. - Apply disciplined software development practices to implement attack paths with technical and team leads.

Requirements

- Hands-on OCI security and offensive cloud experience, including reasoning about permissions, service identities, trust, and resource access. - Advanced understanding of cloud-native security and attack paths. - Python engineering experience, including converting security research or manual techniques into dependable automation or product features. - At least four years of professional software engineering and/or offensive security experience. - Experience in cloud penetration testing, red teaming, offensive research, or cloud security product development. - A record of collaborating with varied engineering teams as an individual contributor, and interest in building products.

Nice to have

- Experience with cloud privilege escalation and identity attacks. - Familiarity with offensive security in AWS, Azure, or GCP.

Benefits and work setup

Full-time roles include stock options. Benefits described in the listing include health, vision, and dental coverage, flexible vacation, and parental leave. Work arrangements may be remote or hybrid depending on role and location.