About the Job
Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assess...
We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, c...
Lead and grow a team of engineers specializing in web application discovery, crawling, and attack surface enumeration.
Key Responsibilities
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.
Required Skills & Abilities
3–5+ years leading engineering, security, or offensive security teams.
Experience managing teams of 4–8+ engineers; comfort scaling a team as the organization grows.
Proven ability to balance hands-on technical depth with the strategic and people responsibilities of management.
Strong coaching instincts: able to assess talent, set growth goals, and develop engineers across experience levels.
Experience managing performance — both high performers and underperformers — with clarity and accountability.
Solid understanding of how modern web applications are structured including routing, authentication flows, session management, APIs, and how different frameworks expose (or obscure) surfaces.
Familiarity with web crawling, spidering, and content discovery techniques, including the challenges posed by single-page applications and multi-step authentication.
Understanding of HTTP fundamentals: request/response structure, cookies and headers, redirects, state management, and how browsers and automated tools interact with web applications differently.
Ability to evaluate the completeness of a discovery pass: what was found, what was likely missed, and why, as well as being able to articulate that clearly to engineers and stakeholders.
Experience in Python or similar to collaborate fluently with software engineers on remediation and product coverage.
Familiarity with CI/CD workflows, ticketing systems (e.g., Jira), and full product development life cycles.
Sufficient technical depth to evaluate the quality of team output, identify coverage gaps, and partner with senior ICs on technical direction.
Experience translating technical gaps into product roadmap input and prioritized engineering work.
Ability to prioritize and make strategic tradeoffs when PM support is limited.
Strong written and verbal communication skills across technical and non-technical audiences.
Customer-first mindset with a focus on completeness, reliability, and clear output.
Hands-on experience with web crawling or scraping tools, browser automation (e.g., Playwright, Puppeteer, Selenium), or similar content discovery tooling.
Familiarity with web application pentesting, understanding how discovery feeds into testing, and what testers need from a discovery pass to do their jobs well.
Familiarity with relational and graph databases, particularly Postgres and Neo4j.
Certifications such as OSCP, OSWE, or comparable offensive security credentials are a plus.
Highly self-directed and effective in ambiguous environments.
Able to operate at both strategic and hands-on technical levels: credible to practitioners on the team and to senior leadership alike.
Maintains high standards for coverage completeness, reliability, and production safety across all team output.
Strong cross-functional partner across Engineering, Product, and GTM.
Relentlessly curious about how modern web applications are built and how that affects what can and can't be found automatically.
We are a fully remote company, and this job may require up to 10% travel for company kick offs and team on-sites.
