Horizon3.ai provides an autonomous offensive security platform that helps organizations proactively identify and remediate exploitable vulnerabilities across their environments.
Get to Know Us Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by ITOps/SecOps teams, consulting pentesters, and MSSPs and MSPs. We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results. WHAT YOU’LL DO LEADERSHIP & TEAM DEVELOPMENT - Lead, mentor, and grow a team of Attack Engineers specializing in vulnerability research, reverse engineering, and exploit development. - Manage a diverse team across multiple seniority levels (from junior engineers to Principal Attack Engineers), ensuring appropriate career development, mentorship, and growth paths for each. - Set technical direction, priorities, and quality standards for vulnerability research and attack module development. - Foster a culture of continuous learning, raising the bar for offensive rigor, delivery quality, and secure software development practices. - Drive hiring and organizational scaling as the Vulnerability Research team expands. VULNERABILITY RESEARCH STRATEGY & EXECUTION (HACK, FIX, VERIFY, REPEAT) - Own the delivery strategy across vulnerability research, patch-diffing, and rapid N-Day weaponization. - Guide the development of end-to-end exploit methodologies: - Oversee the reverse engineering of application binaries and patches (Java, C#, .NET, native binaries). - Ensure the rapid and safe development of proof-of-concept (PoC) exploits for integration into the core product. - Oversee the acquisition and configuration of test systems for exploit development and attack scenario validation. - Ensure NodeZero capabilities remain cutting-edge by maintaining a comprehensive global view of emerging vulnerabilities and the latest threat landscape. - Create tight feedback loops to ensure reverse-engineered exploits are swiftly weaponized and integrated into NodeZero. - Manage operational cadences and ensure the team is prepared to rapidly respond to high-priority emerging vulnerabilities. WHAT YOU’LL BRING LEADERSHIP - 2-3+ years of direct people management experience - 3+ years of software development experience - 5+ years leading offensive security, vulnerability research, or red teams. - Experience hiring and interviewing engineers - Proven ability to balance hands-on technical depth with strategic leadership. - Strong technical writing and communication skills, capable of conveying complex exploits to both technical and non-technical audiences. VULNERABILITY RESEARCH & ATTACK SURFACE EXPERTISE - Deep expertise in vulnerability research, reverse engineering, and exploit development. - In-depth knowledge of common exploitation techniques (e.g., SQL injection, path traversal, buffer overflows). - Strong understanding of network protocols, virtualization technologies, and their role in exploitation vectors. - Experience with reverse engineering technologies like IDA or Ghidra. TECHNICAL / ENGINEERING FLUENCY - Strong background in production software engineering, ideally in Python. - Familiarity with secure software development practices, Git version control, and effective team workflows. - Ability to evaluate technical designs and ensure high-quality, production-safe software. - Experience working with database systems like Postgres or Neo4j. DESIRED SKILLS - Experience with vulnerability disclosure processes (e.g., published CVEs) or bug bounty programs. - Familiarity with additional programming languages such as C, C++, Rust, or Assembly. - Knowledge of containerization technologies like Docker and Kubernetes. - Experience working with cloud environments (AWS, etc.) and large-scale software projects. - Relevant security certifications (e.g., OSCP or equivalent) are a plus. TRAVEL REQUIRED We are a fully remote company, and this job may require up to 10% travel. Perks of Horizon3 - Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive. - Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities. - Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking. - Hybrid & Remote Work: We embrace a mix of remote and hybrid work models depending on role and location, including our Chicago office, where some roles require regular in-office presence. - Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave. Compensation and Values At Horizon3, we believe that our people are our greatest asset, and our compensation philosophy reflects this core value. We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions. Our compensation structure is designed to be fair, competitive, and transparent, ensuring that every team member is rec