Note: The job is a remote job and is open to candidates in USA. Horizon3.ai is seeking an experienced Engineering Manager to lead its Rapid Response Attack Engineering team, which helps customers address emerging exploitable vulnerabilities before adversaries can exploit them. The role oversees vulnerability research, AI-driven automation, exploit pipelines, team development, operational execution, and collaboration with Product Management to deliver a high-quality Rapid Response product.
Responsibilities
- Lead a diverse team of Attack Engineers specializing in vulnerability research and agentic software engineering across multiple seniority levels (from junior engineers to Principal Attack Engineers), ensuring appropriate career development, mentorship, and growth paths for each
- Set technical direction, priorities, and quality standards for AI-native automation pipelines, vulnerability research and the Rapid Response product
- Drive hiring and organizational scaling as the Rapid Response team expands
- Foster a culture of continuous learning, raising the bar for offensive rigor, delivery quality, and secure software development practices
- Lead daily triage, prioritization, and cross-functional coordination for breaking CVEs and zero-days. Establish high-velocity operational cadences that allow the team to analyze, reproduce, and weaponize emerging threats within hours of public disclosure
- Drive the vision and engineering for AI-driven harnesses, LLM workflows, and automated pipelines to accelerate vulnerability discovery, patch diffing, and proof-of-concept exploit development
- Partner seamlessly with Product Management and field teams. Serve as the bridge between technical vulnerability research and product strategy, ensuring a high quality Rapid Response product, delivered continuously at market-leading speed
- Lead the analysis of real-world attack data, telemetry, and threat trends to prioritize high-value research targets and measure the real-world impact of attack coverage
Skills
- • 2-3+ years of direct people management experience
- • 3+ years of software development experience
- • 5+ years immersed in cybersecurity in a vulnerability analysis/research role or offensive security
- • Experience hiring and interviewing engineers
- • Experience partnering with Product Management, field teams, and customers to deliver high quality end-user facing products
- • Proven ability to balance hands-on technical depth with strategic leadership
- • Strong technical writing and communication skills, capable of conveying complex exploits to both technical and non-technical audiences
- • Deep, practical knowledge of vulnerability classes (e.g., remote code execution, authentication bypasses, deserialization, SSRF). Understanding of what makes a vulnerability attractive and practical for real-world threat actors to exploit
- • Strong background in production software engineering, especially in Python and SQL
- • Experience with leveraging AI harnesses and agentic frameworks
- • Familiarity with secure software development practices, Git version control, and effective team workflows
- • Ability to evaluate technical designs and ensure high-quality, production-safe software
- • Experience working with database systems like Postgres or Neo4j
- We are a fully remote company, and this job may require up to 10% travel
- • Experience with vulnerability disclosure processes (e.g., published CVEs) or bug bounty programs
- • Experience in exploit development and reverse engineering
- • Experience writing customer-facing technical content
- • Experience analyzing threat intelligence data and attack telemetry
- • Experience with deception technologies
- • Familiarity with additional programming languages such as C, C++, Rust, or Assembly
- • Knowledge of containerization technologies like Docker and Kubernetes
- • Experience working with cloud environments (AWS, etc.) and large-scale software projects
- • Relevant security certifications (e.g., OSCP or equivalent) are a plus
Benefits
- Fully remote work arrangement
Company Overview