Senior Attack Engineer, Offensive Tooling

We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, c...

We are looking for an Offensive Tooling Engineer to design, develop, and maintain a custom implant framework and supporting C2 infrastructure. You will build cross-platform post-exploitation capabilities in Rust, develop evasion techniques, and create tooling that operates reliably in defended environments.

This is a hands-on engineering role — you will own the full lifecycle from concept through deployment, testing, and monitoring. Your work will have a significant impact on the effectiveness of the NodeZero proactive security platform towards helping defenders prepare themselves against real world threats.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice. 
In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Strong proficiency in Rust, including unsafe code, FFI, async runtimes (tokio), and cross-compilation
Deep knowledge of Windows internals: Win32 API, process injection, memory manipulation, DLL loading, PE format
Experience with credential access techniques (DPAPI, LSASS, browser credential stores)
Familiarity with Linux internals: libc, process enumeration
Understanding of networking at the packet level (TCP/IP, ICMP, custom binary protocols)
Demonstrated experience building or maintaining C2 / implant software (custom or open-source)
Background in red team operations or offensive tool development
Proficiency in Python for developing and maintaining attack automation and integration
Experience developing production safe, high quality code deployed to end user machines
Experience with privilege escalation technique development
Experience researching and implementing EDR evasion techniques
PE parsing and reflective loading
Integration testing offensive tools against defended environments