Staff Software Engineer, Firewall

The role

You will serve as the technical lead for the Firewall pod within Precision Defense. You will build services and integrations that connect NodeZero with WAF management platforms to assess coverage and provide remediation guidance.

What you will do

• Own the technical approach for the Web Application Firewall workstream.
• Design and build reliable integrations with WAF management platforms and their APIs.
• Define correctness checks for recommendations.
• Build durable workflows for long-running or resumable operations.
• Design safety controls for product configuration changes.
• Build observability for system assessments and recommendations.
• Make regular production-code contributions.
• Shape architecture and lead design and code reviews.
• Partner with Product and adjacent technical teams.
• Mentor engineers through influence.

Required qualifications

• Staff-level technical leadership.
• Strong hands-on software engineering skills in designing, shipping, and operating production backend systems.
• Product-minded judgment.
• A reliability and security mindset.
• Ability to work effectively across Product, Engineering, research, and customer-facing teams.
• A collaborative approach to technical leadership.
• Expert-level proficiency in large-scale Python software development.
• 8+ years experience leading technical work at Staff, Lead, or comparable scope.
• Working knowledge of WAF platforms and policy models (i.e. AWS WAF, Cloudflare, F5, Imperva, FortiWeb, or ModSecurity/OWASP CRS).
• Proficiency in other modern backend languages such as Go, or Rust, or a comparable language.
• Experience designing service-oriented systems, APIs, or integrations.
• Strong systems-design skills.

Nice to have

• Experience in adjacent areas such as API security, bot management, rate limiting, or application security testing (DAST/pentesting), or exposure to network firewall platforms and segmentation.
• Experience integrating with security or infrastructure platforms whose APIs and policy models vary by vendor.
• Experience building security products or systems that assess control coverage, validate attack paths, or produce remediation guidance.
• Experience designing safe automation for changes that can affect customer environments.
• Familiarity with cloud environments, containerization, and operating services at scale.
• Experience working closely with Product, AI or applied research, or security practitioners.

Benefits

• Equity package in the form of stock options
• Health, vision & dental insurance for you and your family
• Flexible vacation policy
• Generous parental leave

About the company

Horizon3 is a remote cybersecurity company dedicated to enabling organizations to proactively find, fix and verify exploitable attack vectors. Their flagship product is the NodeZero platform.