Staff Attack Engineer, External
Core
Technical leader for external attack capabilities in NodeZero, an autonomous pentesting platform, turning manual recon and multi-step attacks into safe, reliable, repeatable workflows.
Role type
Staff IC offensive security engineer (external attack surface)
Builds
Production-grade autonomous reconnaissance, discovery, and attack-path modeling workflows
Domain
Cybersecurity, offensive security, cloud/SaaS identity attack surfaces
Deliverable
production ML models | product features
Required skills
Python, offensive security (recon to post-exploitation), unstructured data parsing, graph data modeling, identity tradecraft (SSO/federation), automation of multi-step attack workflows, production software engineering
Preferred skills
OSCP/OSCP/CRTO certification, large-scale internet data tooling (passive DNS, certificate transparency), cloud/SaaS identity pivots, graph databases, open-source contributions
Technologies
Python, graph databases, datalakes, cloud platforms (AWS, Entra ID, Okta)
Responsibilities
Design scalable reconnaissance workflows in Python; research and parse unstructured external data; extend attack-path modeling and graph data models; automate multi-step attack workflows; research emerging tradecraft for production content; mentor engineers and set technical roadmap
Seniority
Staff, technical leadership & hands-on IC
