SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 225,250 - 265,000 / annual
Horizon3.ai is a fast-growing cybersecurity company building NodeZero, an autonomous penetration testing platform that helps organizations proactively identify and fix exploitable attack vectors. The company is founded by former U.S. Special Operations cyber operators and startup engineers, operating fully remote with a mission to solve critical security problems: ineffective tools, alert fatigue, blind spots, and the cybersecurity skills shortage.
You will lead the Partner Integrations team, responsible for shipping and maintaining NodeZero's first-party integration products with major security platforms like Crowdstrike, SentinelOne, Splunk, and ServiceNow. Each integration is treated as a shipped product that must install frictionlessly, stay current as upstream APIs evolve, and meet enterprise quality standards.
Key responsibilities include:
- Leading and growing the Partner Integrations sub-team to 6–7 engineers, owning engineering execution, team health, pace, quality, and reliability.
- Managing the integration product roadmap: deciding what to build next, in what order, and at what depth across named integrations (Crowdstrike Falcon, SentinelOne Singularity, Splunk Enterprise/Cloud, ServiceNow, and others).
- Ensuring production-grade reliability, versioning, and backward-compatibility guarantees that enterprise customers expect.
- Defining the API contract with the Integrations Platform team, who builds the underlying framework and connector infrastructure.
- Owning breaking-change management: monitoring upstream vendor API changes, detecting deprecations, and shipping compatibility fixes before they become customer incidents.
- Building and owning a certification pipeline that gates every integration release, including functional tests, security validation, and partner certification requirements.
- Cross-functional partnership with Customer Success, Security Research, and the partnerships team to align the integration roadmap with customer demand and partner commitments.
- Building a team of engineers who take pride in rock-solid integrations—people who learn new vendor platforms quickly, read API docs critically, and ship products that just work.
Requirements:
- Experience leading engineering teams of 5–8 people building and shipping third-party integration products in a SaaS or security context.
- Hands-on familiarity with the APIs and data models of enterprise security platforms: EDR (Crowdstrike, SentinelOne), SIEM (Splunk, Sentinel), ticketing (ServiceNow, Jira), or similar.
- Track record of shipping integration products that meet enterprise reliability and data fidelity requirements—not just proof-of-concept connectors.
- Experience managing external API dependencies: rate limits, versioning, deprecations, and the operational overhead of staying current across multiple upstream vendors.
- Proven ability to define and execute a roadmap with clear prioritization, balancing customer demand, partner opportunity, and engineering cost.
- Proficiency in Go or Python, capable of reviewing and contributing to integration code.
- Understanding of enterprise authentication patterns: OAuth 2.0, API keys, SAML, and mutual TLS as used by security platform APIs.
- Familiarity with webhook delivery, polling, and event-driven architectures for integration data flows.
- AWS infrastructure experience: Lambda, SQS/SNS, EventBridge, or equivalent for serverless integration execution.
- Experience with data normalization across disparate security data models (findings, assets, vulnerabilities, alerts).
Nice to haves:
- Background in cybersecurity with direct experience with EDR, SIEM, or SOAR platforms from a practitioner or vendor perspective.
- Experience navigating technology partnership programs (Crowdstrike Marketplace, Splunk Splunkbase, ServiceNow Store) and their certification requirements.
- Familiarity with STIX/TAXII or other cybersecurity data exchange standards.
- Experience building customer-facing integration health dashboards or self-service troubleshooting tools.
Up to 5% travel may be required. The company offers competitive salary, equity (stock options), health/vision/dental insurance, flexible vacation, and generous parental leave.
