Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs.
We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.
An Overview
This is the opportunity to lead the team that innovates on and maintains NodeZero's core internal attack capabilities. Internal pentesting is NodeZero's flagship capability and a core part of the growing Horizon3 platform. As Engineering Manager for Internal Attack Engineering, you'll lead an elite group of offensive engineers, with backgrounds in U.S. intelligence, special operations, and top consulting firms, who own that capability end to end: Active Directory, Linux and Unix hosts, databases, network infrastructure, and the other services attackers find inside enterprise networks.
The team spans career-level engineers through Staff and Principal, and its work is to research modern internal tradecraft and turn it into production-safe attacks that run autonomously across the largest enterprise networks in the world. Your job is to keep NodeZero ahead of hardening customer environments and fast-moving tradecraft by building the team, setting its direction, and making sure what it ships is safe to run in production.
This is a hands-on technical leadership role. You don't need to be the strongest operator on the team, but you need to be credible in design and code reviews, able to judge whether an attack is safe to run against a customer's production network, and able to explain an attack path to an engineer, a product manager, or a customer.
This is not consulting or manual pentesting. The team builds software that turns cutting-edge, often manual techniques into safe, reliable, repeatable attacks.