We are seeking an experienced Senior Engineering Manager to lead our Rapid Response Attack Engineering team. Rapid Response is Horizon3’s proactive capability that allows customers to keep ahead of emerging, exploitable vulnerabilities before adversaries can exploit them in the wild. You will lead a high-performing team of Attack Engineers operating at the intersection of breaking vulnerability research, AI-driven automation, and product delivery.
In this role, you will establish operational excellence across daily triage and execution while balancing rapid delivery with production-safe quality. You will bring a deep understanding of vulnerability analysis, lead a team building out cutting-edge AI harnesses to accelerate vulnerability research and exploit pipelines, and partner closely with Product Management to turn offensive research into a high-quality product.
Ideal candidates bring a strong mix of technical depth in vulnerability analysis, leadership experience, and a software engineering mindset. You should be excited to mentor a diverse team and build foundational AI-native technologies that shape the future of autonomous offensive security.
What You’ll DoLeadership & Team DevelopmentLead a diverse team of Attack Engineers specializing in vulnerability research and agentic software engineering across multiple seniority levels (from junior engineers to Principal Attack Engineers), ensuring appropriate career development, mentorship, and growth paths for each.
Set technical direction, priorities, and quality standards for AI-native automation pipelines, vulnerability research and the Rapid Response product
Drive hiring and organizational scaling as the Rapid Response team expands.
Foster a culture of continuous learning, raising the bar for offensive rigor, delivery quality, and secure software development practices.
Lead daily triage, prioritization, and cross-functional coordination for breaking CVEs and zero-days. Establish high-velocity operational cadences that allow the team to analyze, reproduce, and weaponize emerging threats within hours of public disclosure.
Drive the vision and engineering for AI-driven harnesses, LLM workflows, and automated pipelines to accelerate vulnerability discovery, patch diffing, and proof-of-concept exploit development.
Partner seamlessly with Product Management and field teams. Serve as the bridge between technical vulnerability research and product strategy, ensuring a high quality Rapid Response product, delivered continuously at market-leading speed.
Lead the analysis of real-world attack data, telemetry, and threat trends to prioritize high-value research targets and measure the real-world impact of attack coverage.
2-3+ years of direct people management experience
3+ years of software development experience
5+ years immersed in cybersecurity in a vulnerability analysis/research role or offensive security
Experience hiring and interviewing engineers
Experience partnering with Product Management, field teams, and customers to deliver high quality end-user facing products
Proven ability to balance hands-on technical depth with strategic leadership.
Strong technical writing and communication skills, capable of conveying complex exploits to both technical and non-technical audiences.
Deep, practical knowledge of vulnerability classes (e.g., remote code execution, authentication bypasses, deserialization, SSRF). Understanding of what makes a vulnerability attractive and practical for real-world threat actors to exploit.
Strong background in production software engineering, especially in Python and SQL
Experience with leveraging AI harnesses and agentic frameworks
Familiarity with secure software development practices, Git version control, and effective team workflows.
Ability to evaluate technical designs and ensure high-quality, production-safe software.
Experience working with database systems like Postgres or Neo4j.
Experience with vulnerability disclosure processes (e.g., published CVEs) or bug bounty programs.
Experience in exploit development and reverse engineering
Experience writing customer-facing technical content
Experience analyzing threat intelligence data and attack telemetry
Experience with deception technologies
Familiarity with additional programming languages such as C, C++, Rust, or Assembly.
Knowledge of containerization technologies like Docker and Kubernetes.
Experience working with cloud environments (AWS, etc.) and large-scale software projects.
Relevant security certifications (e.g., OSCP or equivalent) are a plus.
We are a fully remote company, and this job may require up to 10% travel.
Skills Required
- 2-3+ years of direct people management experience
- 3+ years of software development experience
- 5+ years of cybersecurity experience in vulnerability analysis, vulnerability research, or offensive security
- Experience hiring and interviewing engineers
- Experience partnering with Product Management, field teams, and customers to deliver end-user-facing products
- Proven ability to balance hands-on technical depth with strategic leadership
- Strong technical writing and communication skills
- Deep practical knowledge of vulnerability classes, including remote code execution, authentication bypasses, deserialization, and SSRF
- Strong production software engineering background, especially in Python and SQL
- Experience leveraging AI harnesses and agentic frameworks
- Familiarity with secure software development practices, Git version control, and effective team workflows
- Ability to evaluate technical designs and ensure high-quality, production-safe software
- Experience with database systems such as Postgres or Neo4j
- Experience with vulnerability disclosure processes, published CVEs, or bug bounty programs
- Experience in exploit development and reverse engineering
- Experience writing customer-facing technical content
- Experience analyzing threat intelligence data and attack telemetry
- Experience with deception technologies
- Familiarity with C, C++, Rust, or Assembly
- Knowledge of Docker and Kubernetes
- Experience with cloud environments such as AWS and large-scale software projects
- Relevant security certification such as OSCP or equivalent
Horizon3.ai Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Horizon3.ai and has not been reviewed or approved by Horizon3.ai.
-
Fair & Transparent Compensation — Pay is considered competitive across key roles, with employer language and role ranges positioning compensation as market-aligned. Feedback suggests compensation is viewed favorably, particularly in technical positions.
-
Equity Value & Accessibility — Equity is positioned as a core part of total rewards, with stock options broadly available to full-time employees. Feedback suggests equity and related programs enhance overall compensation.
-
Leave & Time Off Breadth — Time off is described as at least four weeks plus generous holidays and vacation packages globally. Feedback suggests this breadth of leave contributes to positive perceptions of total rewards.
Horizon3.ai Insights
What We Do
Horizon3.ai's mission is to help you find and fix attack vectors before attackers can exploit them. NodeZero, our autonomous penetration testing solution, enables organizations to continuously assess the security posture of their enterprise, including external, identity, on-prem, IoT, and cloud attack surfaces. Like APTs, ransomware, and other threat actors, our algorithms discover and fingerprint your attack surface, identifying the ways exploitable vulnerabilities, misconfigurations, harvested credentials, and dangerous product defaults can be chained together to facilitate a compromise. NodeZero is a true self-service SaaS offering that is safe to run in production and requires no persistent or credentialed agents. You will see your enterprise through the eyes of the attacker, identify your ineffective security controls, and ensure your limited resources are spent fixing problems that can actually be exploited. Founded in 2019 by industry, US Special Operations, and US National Security veterans, Horizon3.ai is headquartered in San Francisco, CA, and made in the USA.
