Staff Attack Engineer

Role Overview:

• We're looking for a Staff Attack Engineer to lead external attack capabilities in NodeZero, our autonomous pentesting platform.
• You'll own technical direction, set research roadmap, and turn manual offensive workflows into safe, reliable, repeatable automation.

What You'll Do:

• Design and build scalable reconnaissance workflows that discover and fingerprint external-facing assets and services in Python.
• Automate multi-step attack workflows that chain discovery, credential access, initial access, and post-exploitation into proven attack paths.
• Collect and connect high-volume data into attack-path models that represent identity, privilege, and relationship paths.

What You'll Bring:

• 10+ years of hands-on offensive security experience, with recent work building and shipping offensive tooling.
• Strong command of identity-focused tradecraft including credential access, SSO and federation weaknesses.
• Ability to independently research unfamiliar systems and rapidly become the team's expert.

Compensation and Benefits:

• Base salary range of $238,000 - $280,000 annually, plus equity.
• Benefits include health, vision, dental insurance, flexible vacation, and generous parental leave.
• Fully remote company with up to 5% travel required.