Director of Engineering, Webapp & AI Attack

As Director of Engineering for Webapp and AI Attack, you'll set direction and lead the teams that turn Webapp and AI related offensive security expertise into dependable, customer-facing NodeZero capabilities. You'll own the strategy, execution, and organizational health of this portfolio, partnering with engineering managers, technical leaders, Product, Platform, and customer-facing teams. This is a people and portfolio leadership role. Horizon3 is a remote-first company, and this role may require up to 15% travel.

Responsibilities

Lead and develop the Webapp and AI Attack engineering teams, setting ownership, goals, and expectations; Define a coherent strategy and roadmap connecting customer needs, product priorities, offensive research, and engineering investments; Build an effective leadership structure; hire, coach, and develop engineering managers, technical leaders, and senior individual contributors; Own the health and performance of the organization, including talent planning, career development, feedback, accountability, and succession planning; Set direction for NodeZero's web application attack portfolio, including application discovery, crawling, authentication and session handling, and attack coverage; Set the strategy for turning AI/LLM and agentic-system security research into safe, reliable, repeatable attack capabilities in NodeZero; Guide teams in assessing AI applications and infrastructure and evaluating relevant attack classes such as prompt injection and unsafe tool use; Establish quality standards for testing, evaluation, reliability, observability, cost management, and operational readiness; Partner with Product and leaders across Engineering, Platform, and customer-facing functions to translate opportunities into sequenced plans; Make and communicate tradeoffs across customer impact, speed, coverage, reliability, safety, cost, and maintainability; Drive complex, cross-team initiatives from planning through production; Ensure strong engineering practices across design, implementation, testing, release, monitoring, and incident response

Requirements

Significant experience leading software engineering teams that build customer-facing products, ideally in cybersecurity, security testing, or another technically complex SaaS domain; Experience leading multiple teams and developing managers and senior technical leaders; Demonstrated ability to set strategy and deliver across multiple teams; Strong technical judgment in software architecture, automation, distributed systems, and production operations; Experience taking complex capabilities from early research or concept through reliable production delivery; A customer-oriented product mindset; Ability to build effective partnerships across Engineering, Product, and customer-facing teams; A demonstrated commitment to coaching, clear performance feedback, inclusive leadership, and healthy team culture; Excellent written, verbal, and analytical communication skills; A high degree of initiative, ownership, and accountability; Bachelor's or Master's degree in Computer Science, Engineering, or a related field, or equivalent practical experience; Familiarity with offensive security, web application penetration testing, vulnerability research, attack automation, or building security products; Working knowledge of modern web application architecture, HTTP, authentication and session flows, APIs, browser automation; Familiarity with AI/LLM and agentic-system security, including trust boundaries, tool-use risks, and approaches to evaluating AI-enabled systems; Experience with cloud software and production platforms, and fluency in at least one modern programming language such as Python, TypeScript, Go, or a comparable language; Understanding of CI/CD, automated testing, observability, incident response, and operational readiness

Nice to have

Direct leadership experience across both web application security and AI/LLM security; Experience with web crawling, spidering, browser automation, application discovery, or authentication technologies such as SSO, SAML, or OIDC; Experience shipping AI/LLM security capabilities, building agentic workflows, or applying frameworks such as OWASP Top 10 for LLM Applications or MITRE ATLAS; Contributions to security research, open-source tooling, technical publications, conference talks; Experience with cloud providers such as AWS, Azure, or GCP; graph or relational databases such as Neo4j or PostgreSQL; offensive security certifications such as OSCP, OSEP, or OSWE

Benefits

Equity package in the form of stock options for full-time roles; Health, vision & dental insurance for you and your family; Flexible vacation policy; Generous parental leave; Competitive compensation; Growth opportunities and career development; Innovative, collaborative culture