SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Horizon3.ai is seeking an experienced Engineering Manager to lead the Rapid Response Attack Engineering team. Rapid Response is a proactive capability that enables customers to identify and address emerging, exploitable vulnerabilities before adversaries can exploit them in the wild.
You will lead a high-performing team of Attack Engineers working at the intersection of vulnerability research, AI-driven automation, and product delivery. The role balances establishing operational excellence in daily triage and execution with rapid delivery and production-quality standards.
Key responsibilities include leading a diverse team of Attack Engineers across multiple seniority levels, from junior engineers to Principal Attack Engineers, with a focus on mentorship and career development. You will set technical direction and quality standards for AI-native automation pipelines and vulnerability research. You'll drive daily triage and prioritization of breaking CVEs and zero-days, establishing high-velocity operational cadences that allow the team to analyze, reproduce, and weaponize emerging threats within hours of public disclosure.
You will drive the vision for AI-driven harnesses, LLM workflows, and automated pipelines to accelerate vulnerability discovery, patch diffing, and proof-of-concept exploit development. Partnering seamlessly with Product Management and field teams, you'll serve as the bridge between technical vulnerability research and product strategy, ensuring high-quality product delivery at market-leading speed.
Required qualifications include 2-3+ years of direct people management experience, 3+ years of software development experience, and 5+ years in cybersecurity focused on vulnerability analysis/research or offensive security. You should have deep, practical knowledge of vulnerability classes, strong production software engineering background (especially Python and SQL), and experience with AI harnesses and agentic frameworks. Experience with secure software development practices, Git, database systems like Postgres or Neo4j, and the ability to evaluate technical designs and ensure production-safe software are essential.
Desired skills include vulnerability disclosure and CVE experience, exploit development and reverse engineering, customer-facing technical writing, threat intelligence analysis, deception technologies, additional programming languages (C, C++, Rust, Assembly), containerization (Docker, Kubernetes), cloud environments (AWS), and relevant security certifications (OSCP or equivalent).
The role is fully remote with up to 10% travel required.
