Senior Attack Engineer, Offensive Tooling

About the role

We are looking for an Offensive Tooling Engineer to join our team. You will design, develop, and maintain a custom implant framework and supporting C2 infrastructure. Your work will have a significant impact on the effectiveness of the NodeZero proactive security platform.

Responsibilities

• Develop and maintain a multi-platform implant written in Rust (Windows, Linux, macOS; x86/x64/ARM)
• Build and extend C2 server infrastructure, task dispatch, and communications protocols
• Implement post-exploitation modules: credential access, process injection, privilege escalation, lateral movement
• Research and implement AV/EDR evasion techniques to keep tooling operational against modern defenses
• Create network pivoting and tunneling capabilities
• Write integration tests that exercise tooling against real targets across multiple OS and architecture combinations

Requirements

• Strong proficiency in Rust, including unsafe code, FFI, async runtimes (tokio), and cross-compilation
• Deep knowledge of Windows internals: Win32 API, process injection, memory manipulation, DLL loading, PE format
• Experience with credential access techniques (DPAPI, LSASS, browser credential stores)
• Familiarity with Linux internals: libc, process enumeration
• Understanding of networking at the packet level (TCP/IP, ICMP, custom binary protocols)
• Demonstrated experience building or maintaining C2 / implant software (custom or open-source)
• Background in red team operations or offensive tool development
• Proficiency in Python for developing and maintaining attack automation and integration
• Experience developing production safe, high quality code deployed to end user machines

Competencies/Desired

• Experience with privilege escalation technique development
• Experience researching and implementing EDR evasion techniques
• PE parsing and reflective loading
• Integration testing offensive tools against defended environments

Perks of Horizon3.ai

• Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive.
• Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities.
• Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking.
• Remote Work: We are a 100% remote company. Enjoy the convenience and work-life balance that comes with remote work.
• Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave.

Career Values

• We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions.
• We are dedicated to attracting, developing, and retaining a workforce that reflects the varied communities we serve.
• We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions.

Application Note

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.