SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Horizon3.ai is a fast-growing cybersecurity company building NodeZero, an autonomous penetration testing platform that helps organizations proactively discover and fix exploitable attack vectors. The company combines former U.S. Special Operations cyber operators, startup engineers, and security practitioners to solve critical problems: ineffective security tools, alert fatigue, blind spots, and the cybersecurity skills shortage.
You will lead and grow a team of 4–8+ engineers specializing in web application discovery, crawling, and attack surface enumeration. Your core responsibilities span three areas:
LEADERSHIP & TEAM DEVELOPMENT: Build and scale a high-performing engineering team. Set technical direction, methodology standards, and quality expectations. Mentor engineers to raise the bar on coverage completeness, framework breadth, and reliability. Actively manage performance, recognize high performers, address underperformance early, and create growth opportunities. Drive hiring as the team expands.
DISCOVERY STRATEGY & EXECUTION: Own the team's strategy for web application surface discovery within NodeZero. Guide development of crawling and spidering capabilities that handle real-world complexity: JavaScript-heavy SPAs, multi-step authentication flows, session management, dynamic routing, and non-standard navigation patterns. Ensure discovery coverage is comprehensive and consistent. Oversee benchmark and regression testing to prevent silent degradation. Partner with downstream teams to understand discovery gaps and prioritize work.
PRODUCT & CROSS-FUNCTIONAL PARTNERSHIP: Translate discovery gaps into prioritized roadmap input. Work closely with the Webapp Pen Testing team to create tight feedback loops between discovery and test coverage. Engage with architects and engineers on complex discovery initiatives. Define the team's technical roadmap over quarterly horizons, balancing new framework coverage against reliability and performance improvements. Investigate coverage questions with customers and internal teams.
You bring 3–5+ years leading engineering, security, or offensive security teams, with proven experience managing teams of 4–8+ engineers and scaling as organizations grow. You balance hands-on technical depth with strategic and people responsibilities. You have solid understanding of modern web application architecture, routing, authentication flows, session management, APIs, and how different frameworks expose surfaces. You're familiar with web crawling, spidering, and content discovery techniques, including challenges posed by SPAs and multi-step authentication. You understand HTTP fundamentals and can evaluate discovery completeness. You have experience in Python or similar languages, familiarity with CI/CD workflows and Jira, and sufficient technical depth to evaluate team output and partner on technical direction. You translate technical gaps into product roadmap input, prioritize strategically, and communicate clearly across technical and non-technical audiences.
