Engineering Manager, Internal Attack

The role

You will lead a team of offensive engineers to research and build autonomous internal attack capabilities for the NodeZero platform. This hands-on technical leadership role involves managing engineers, setting technical strategy, and ensuring attack tools are safe for production environments.

What you will do

• Lead, coach, and grow a team of Attack Engineers and backend engineers
• Own hiring for the team including shaping roles and running interview loops
• Set clear expectations, give feedback, and run performance reviews
• Define the team strategy and roadmap for internal and AD attack coverage
• Drive coverage for modern, hardened environments
• Guide work across the internal attack chain including credential access and lateral movement
• Guide coverage for Linux/Unix hosts, databases, and network infrastructure
• Own the discovery foundation for host, service, and credential discovery
• Push the team to build AI agents
• Own the team's production-safety standards

Required qualifications

• 2+ years managing engineers on an offensive security, red team, or attack engineering team
• 8+ years of combined offensive security and software engineering experience
• Significant hands-on time attacking Active Directory and internal enterprise networks
• Working command of current AD tradecraft
• Hands-on experience with internal attacks beyond Active Directory
• Software engineering fluency in Python
• Experience working in Git, merge request, CI/CD, and product development workflows
• Experience turning offensive findings or manual techniques into product capabilities
• Sound judgment about operational safety when running offensive techniques against production customer environments
• Strong written and verbal communication

Nice to have

• Experience leading teams that build autonomous pentesting, breach and attack simulation, or other offensive security products
• Experience with SCCM, Windows Admin Center, and hybrid identity attacks
• Experience scaling network discovery and scanning across very large enterprise networks
• Experience building LLM-powered agents or applying AI to offensive security or asset discovery workflows
• Familiarity with graph databases (Neo4j) and attack-path analysis
• OSCP, OSEP, CRTO, or equivalent offensive certifications
• Public contributions to the field: open-source tools, technical blog posts, conference talks, or published CVEs
• Experience managing a fully remote engineering team

Benefits

• Equity package in the form of stock options
• Health, vision & dental insurance for you and your family
• Flexible vacation policy
• Generous parental leave

About the company

Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors. Their flagship product, the NodeZero platform, delivers production-safe autonomous pentests.