/draftSign in

Engineering Manager, Internal Attack

Horizon3 · Remote · US, Remote · $238k–$280k

Posted by Horizon3 on their careers site · View the original posting

Draft this job a résumé tailored to it, and the application filled in

draft's reading

Mid level

Open 2 days

The posting, as Horizon3 wrote it

Get to Know Us

Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs.

We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.

An Overview

This is the opportunity to lead the team that innovates on and maintains NodeZero's core internal attack capabilities. Internal pentesting is NodeZero's flagship capability and a core part of the growing Horizon3 platform. As Engineering Manager for Internal Attack Engineering, you'll lead an elite group of offensive engineers, with backgrounds in U.S. intelligence, special operations, and top consulting firms, who own that capability end to end: Active Directory, Linux and Unix hosts, databases, network infrastructure, and the other services attackers find inside enterprise networks.

The team spans career-level engineers through Staff and Principal, and its work is to research modern internal tradecraft and turn it into production-safe attacks that run autonomously across the largest enterprise networks in the world. Your job is to keep NodeZero ahead of hardening customer environments and fast-moving tradecraft by building the team, setting its direction, and making sure what it ships is safe to run in production.

This is a hands-on technical leadership role. You don't need to be the strongest operator on the team, but you need to be credible in design and code reviews, able to judge whether an attack is safe to run against a customer's production network, and able to explain an attack path to an engineer, a product manager, or a customer.

This is not consulting or manual pentesting. The team builds software that turns cutting-edge, often manual techniques into safe, reliable, repeatable attacks.

What You’ll Do

Leadership & Team Development

  • Lead, coach, and grow a team of Attack Engineers and backend engineers focused on internal network attacks, from Active Directory to Linux hosts, databases, and network infrastructure.
  • Own hiri

[…]
work models depending on role and location, including our Chicago office, where some roles require regular in-office presence.

  • Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave.

You Belong Here

Horizon3 is not just an equal opportunity employer - we are a community that values diversity, equity, and inclusion as fundamental principles of our culture and success. We are dedicated to fostering a workplace where everyone feels welcome and respected, regardless of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, hair length or any other legally protected status by law.

Our commitment to diversity and inclusion means we strive to attract, develop, and retain a workforce that reflects the varied communities we serve. We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions. At Horizon3, every team member is valued and supported in an environment that encourages personal and professional growth.

We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply. Come be a part of Horizon3, where your unique contributions are recognized, and your potential is limitless.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

Application Note

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.