> Markdown version of [/jobs/ext/4012568-senior-attack-engineer-internal-systems](https://www.wearedevelopers.com/jobs/ext/4012568-senior-attack-engineer-internal-systems). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Attack Engineer, Internal Systems - **Company:** HORIZON 3, LLC - **Location:** Chicago, IL, United States (Remote available) - **Experience:** Expert - **Salary:** $206,278 - $242,680 - **Contract:** Permanent contract - **Skills:** Private Networks, Microsoft Windows, Active Directory, Artificial Intelligence, Software System Penetration Testing, Systems Engineering, Software as a Service, Software Quality, Code Review, Communications Protocols, Databases, Data Structures, Graph Database, Internet Security, Python (Programming Language), PostgreSQL, System Center Configuration Manager, Neo4j, Object-Oriented Software Development, Open Source Technology, Software Engineering, Large Language Models, HybridCloud, Containerization, Kubernetes, Production Code, Docker - **Published:** October 29, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-attack-engineer-internal-systems--87822c73-6906-46b7-ba21-a256a4fa6416 ## About the Role Systems Engineering, Operational Audit, Consulting, Government, Hybrid Cloud, Internet Security, Artificial Intelligence (AI), Startup, Software Engineering, Microsoft Active Directory, We're seeking a Senior Attack Engineer who blends deep software engineering expertise with a passion for cybersecurity. In this role, you'll independently lead complex internal network and Active Directory attack projects in NodeZero, our autonomous pentesting platform., * Expert-level proficiency in Python for large-scale development and a track record of shipping and maintaining tested, documented, production-quality code. * Strong command of internal network attack techniques, including network protocol exploitation, privilege escalation, lateral movement, and credential access. * Experience with object-oriented design, API integration, data structures, and building scalable system components in fast-paced product environments. * Experience designing complex software components or systems, accounting for extensibility, operational safety, performance, and long-term maintenance, and explaining the reasoning behind architectural decisions. * A track record of independently leading complex, high-impact technical projects with significant risk, making sound decisions under ambiguity, and identifying business implications and delivery risks before they become critical issues. * Strong written and verbal communication, including clear technical documentation and the ability to explain design choices, risks, and tradeoffs to engineers and non-technical stakeholders. * Demonstrated investment in teammates' growth through proactive mentorship, architectural feedback, and code reviews, along with experience improving team processes, tooling, or technical standards. * Offensive security and software engineering background with a strong passion for turning security research into safe, maintainable product capabilities. What Sets You Apart * OSCP (or OSEP, CRTO, or equivalent offensive certifications). * Experience researching and implementing attacks against SCCM, Windows Admin Center, and other modern Windows management-plane attack surfaces. * Familiarity with containerization (Docker, Kubernetes) and working with relational (Postgres) and graph (Neo4j) databases. * Experience developing or contributing to offensive tooling like BloodHound, Impacket, netexec, etc. * Hands-on experience with graph databases (Neo4j) and attack-path analysis, including extending models to represent new identity and privilege relationships. * Experience integrating security research into production, multi-tenant SaaS, with attention to testing, reliability, and customer safety. * Public contributions to the field: open-source tools, technical blog posts, conference talks, or published CVEs. * Experience building production-safe autonomous or automated offensive tooling, including applying AI/LLM technologies to enhance attack workflows. ## Description * Research and develop novel attack capabilities for integration into the NodeZero platform, focusing on autonomous red teaming, internal network breach techniques, and offensive security automation. * Research emerging internal tradecraft (network protocol exploitation, Active Directory abuse, management-plane attacks, delegation, credential access, and hybrid identity pivots) and turn it into production attack content. * Design, build, and maintain production-grade Python systems, making clear tradeoffs between attack effectiveness, operational safety, reliability, scalability, and maintainability. * Acquire, configure, and exploit modern, hardened internal test environments to validate and demonstrate complex attack scenarios. * Monitor public vulnerability databases and threat intelligence sources to stay current on emerging threats and incorporate them into internal network attack modules. * Extend and maintain platform architecture and graph data models for new identity, privilege-escalation, and lateral-movement paths. * Help shape the team's coverage priorities using customer needs, threat intelligence, and emerging techniques; scope deliverable projects and proactively raise risks and tradeoffs. * Mentor teammates and improve team processes, code quality, architectural standards, and research safety practices. * Partner cross-functionally with engineers, product managers, and customer-facing teams to resolve issues, enhance features, author technical documentation, and drive customer value., * Deep, hands-on offensive security experience against internal enterprise networks and Active Directory, from initial foothold through domain and enterprise compromise.