[Hiring] Engineering Manager, Internal Attack @Horizon3

Role Description

This is the opportunity to lead the team that innovates on and maintains NodeZero's core internal attack capabilities. Internal pentesting is NodeZero's flagship capability and a core part of the growing Horizon3 platform. As Engineering Manager for Internal Attack Engineering, you'll lead an elite group of offensive engineers, with backgrounds in U.S. intelligence, special operations, and top consulting firms, who own that capability end to end.

• Active Directory, Linux and Unix hosts, databases, network infrastructure, and other services attackers find inside enterprise networks.
• Research modern internal tradecraft and turn it into production-safe attacks that run autonomously across the largest enterprise networks.
• Keep NodeZero ahead of hardening customer environments and fast-moving tradecraft by building the team, setting its direction, and ensuring safe production releases.

This is a hands-on technical leadership role. You don't need to be the strongest operator on the team, but you need to be credible in design and code reviews, able to judge whether an attack is safe to run against a customer's production network, and able to explain an attack path to an engineer, a product manager, or a customer.

This is not consulting or manual pentesting. The team builds software that turns cutting-edge, often manual techniques into safe, reliable, repeatable attacks.

Qualifications

• 2+ years managing engineers on an offensive security, red team, or attack engineering team.
• 8+ years of combined offensive security and software engineering experience.
• Working command of current AD tradecraft and how it changes in hardened environments.
• Hands-on experience with internal attacks beyond Active Directory.
• Software engineering fluency: comfortable reading and reviewing production Python.
• Experience turning offensive findings or manual techniques into product capabilities.
• Sound judgment about operational safety when running offensive techniques against production customer environments.
• A record of building teams people want to join and stay on.
• Strong written and verbal communication skills.
• Comfort setting direction in ambiguous situations.

Requirements

• Lead, coach, and grow a team of Attack Engineers and backend engineers.
• Own hiring for the team: shape the open roles, run interview loops.
• Set clear expectations by level, give direct and timely feedback.
• Develop technical leaders on the team.
• Be accountable for the performance and quality of the team's work.
• Define the team's strategy and roadmap for internal and AD attack coverage.
• Drive coverage for modern, hardened environments.
• Guide work across the internal attack chain.
• Own the discovery foundation the rest of the attack chain depends on.
• Push the team to build AI agents.
• Own the team's production-safety standards.
• Set engineering standards for code review, testing, and observability.
• Run execution: break the roadmap into scoped work.
• Partner with Product to turn customer feedback into prioritized roadmap input.
• Own the team's on-call rotation and serve as the escalation point for internal-attack customer issues.
• Support customer briefings and external research.

Benefits

• Inclusive Team: We value diversity and promote an inclusive culture.
• Growth Opportunities: Be part of a dynamic and growing team.
• Innovative Culture: Work in a collaborative environment.
• Hybrid & Remote Work: Embrace a mix of remote and hybrid work models.
• Competitive Compensation: Competitive salary, equity, and benefits.

Company Description

Horizon3 is a fast-growing, remote cybersecurity company dedicated to enabling organizations to proactively find, fix, and verify exploitable attack vectors before criminals exploit them.

• Flagship product: NodeZeroTM platform.
• Adopted by organizations of all sizes.
• Team of former U.S. Special Operations cyber operators and frustrated cybersecurity practitioners.