Note: The job is a remote job and is open to candidates in USA. Horizon3.ai is a remote cybersecurity company that develops the NodeZero platform for autonomous penetration testing and security assessment operations. The Engineering Manager will lead the team building NodeZero Tripwires, overseeing delivery strategy, technical direction, product roadmap collaboration, team development, detection capabilities, and operational excellence.
Responsibilities
- Own the delivery strategy for Tripwires: decoy and deception development, detection, alerting, and the customer-facing experience around them
- Partner closely with Product to sequence the roadmap, and expand Tripwires coverage
- Recruit, mentor, and retain engineers who care about both distributed systems craft and the security domain
- Oversee the design of new tripwire types that are attractive to attackers and indistinguishable from legitimate assets
- Invest in operational excellence; SLOs, observability, on-call, and incident response
- Partner with the Attack team to create tight feedback loops so new offensive findings translate into new detection coverage
- Establish healthy team practices: design reviews, technical writing, clear API contracts with neighboring teams, and durable decision records
Skills
- Experience managing backend, data, or platform engineering teams, with a track record of shipping through the team
- Solid fundamentals in backend and distributed systems: data modeling, API design, queues/streams, and the tradeoffs between batch and streaming
- Ability to lead through technical ambiguity — you can facilitate a design discussion, help the team converge, and know when to dig in yourself
- Clear written communication: you can put together a roadmap, a design doc, or a postmortem the rest of the company can read
- A sense of ownership for how the team operates day-to-day, not just what it ships
- Working knowledge of deception technology: honeypots, honeytokens, canaries
- Comfort with modern cloud infrastructure (AWS preferred), containers, and observability tooling (Datadog or similar)
- Exposure to event-driven architectures or streaming platforms (Kafka, Pulsar, Kinesis, Flink, or similar)
- Understanding of how attackers move through an environment post-compromise: credential access, lateral movement, and privilege escalation
- Background in cybersecurity, pentesting, or vulnerability management
- Familiarity with Python and/or Go
Benefits
- Inclusive culture where everyone can thrive.
- Numerous career development opportunities.
- A collaborative environment that encourages creativity and out-of-the-box thinking.
- Remote and hybrid work models depending on role and location.
- Health, vision & dental insurance for you and your family.
- A flexible vacation policy.
- Generous parental leave.
- All full-time roles are eligible for an equity package in the form of stock options.
Company Overview