Staff Attack Engineer, External

Role overview Set technical direction for external attack capabilities in an autonomous security testing platform. The work turns skilled operators’ reconnaissance and attack-path analysis into safe, scalable, repeatable software that can assess large and complex external environments. This is a technical leadership role combining research, production engineering, roadmap ownership, and mentorship.

Responsibilities - Build and maintain scalable Python workflows to discover, enumerate, and fingerprint internet-facing assets and services. - Parse and enrich inconsistent data such as service banners, web content, documents, and error output. - Extend data models and graph relationships to connect assets, identities, privileges, exposed credentials, and potential attack paths. - Automate multi-step attack scenarios and research emerging techniques for production-ready assessment content. - Create representative test environments and validate scenarios while respecting scope, rate limits, and customer safety. - Guide technical priorities and mentor engineers, raising standards for research rigor, code quality, and operational safety.

Requirements - Strong production engineering skills in Python and experience building scalable reconnaissance or security automation. - Deep understanding of external attack surfaces, identity relationships, and how weaknesses can be chained into compromise paths. - Ability to turn security research and unstructured data into accurate, reliable production capabilities. - Experience validating attack scenarios in test environments and designing for safety across large target sets. - Technical leadership skills, including setting priorities, mentoring engineers, and working across teams.

Benefits and work setup The position is remote. The listed annual base salary range is $238,000–$280,000, with stock options for full-time employees; compensation depends on location, qualifications, experience, and skills. Benefits include medical, dental, and vision coverage, flexible vacation, and parental leave.