Research Oracle Cloud Infrastructure services and identify offensive security opportunities across the platform
Develop new attack techniques, attack paths, and security assessments targeting OCI environments
Build and maintain production-quality Python code that powers NodeZero attack capabilities
Conduct offensive security research against OCI compute, networking, storage, databases, IAM, Kubernetes, and cloud-native services
Analyze real-world OCI deployments to identify common attack vectors and customer risk patterns
Collaborate closely with software engineers, attack engineers, and offensive security SMEs to bring new capabilities into production
Document research findings, attack methodologies, and technical design decisions
Help prioritize future OCI attack coverage based on customer demand and emerging threats
Contribute to the technical direction of NodeZero's cloud attack capabilities

Hands-on offensive security experience targeting Oracle Cloud Infrastructure (OCI)
Strong understanding of cloud attack paths and cloud-native security concepts
Experience with web application testing, cloud penetration testing, external assessments, or red team operations
Experience writing Python code for automation, tooling, or offensive security workflows
Ability to independently research unfamiliar technologies and rapidly become an expert
Strong written communication and technical documentation skills
Passion for building products, not just finding vulnerabilities
10+ years of professional software engineering and/or offensive security experience
Preferred: Experience attacking OCI Kubernetes Engine (OKE)
Preferred: Experience with cloud privilege escalation and identity attacks

Staff Attack Engineer

Key skills