Engineering Manager, Internal Attack

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $238k - $280k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♀️ Software Engineering Manager

👻 Ghost score 20%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Horizon3.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Horizon3. ai is a cybersecurity company that specializes in autonomous penetration testing through its platform, NodeZero. The company's mission is to proactively identify and address attack vectors before they can be exploited, allowing organizations to continuously assess their security posture across various environments including cloud, IoT, and on-premises systems. Founded by veterans from the US Special Operations and National Security sectors, Horizon3. ai offers a self-service SaaS solution that provides organizations with insights into their security vulnerabilities without requiring persistent or credentialed agents.

📋 Description

• Lead, coach, and grow a team of Attack Engineers and backend engineers focused on internal network attacks • Own hiring for the team, shape open roles, run interview loops, and close offensive and backend engineers • Set expectations by level, provide feedback, run 1:1s and performance reviews, and build growth plans • Develop Staff and Principal technical leaders and distribute domain expertise and review ownership • Own team performance and quality while aligning work with Product and Engineering goals • Define strategy and roadmap for internal and Active Directory attack coverage • Drive coverage for modern hardened environments and evolving internal attack tradecraft • Guide work across credential access, Kerberos and delegation abuse, NTLM coercion and relay, AD Certificate Services, SCCM, ACL and GPO abuse, lateral movement, and Entra ID pivots • Guide coverage across Linux and Unix hosts, databases, network infrastructure, and embedded devices • Own host discovery, service and OS fingerprinting, and credential and secrets discovery at large-network scale • Push the team to build AI agents that improve internal attacks • Own production-safety standards, including account lockout safety, customer exclusions, fragile-device and database handling, artifact cleanup, and safe defaults • Set standards for code review, testing, lab regression testing, and observability • Run execution by scoping roadmap work, balancing new coverage with reliability fixes and customer escalations, and delivering commitments • Partner with Product to prioritize roadmap input from customer feedback, field findings, and threat intelligence • Direct backend work on NodeZero’s attack-path graph and data model and coordinate cross-team changes • Partner with peer Attack Engineering teams on shared infrastructure, cross-domain attack paths, and consistent standards • Own the on-call rotation and serve as escalation point for internal-attack customer issues • Drive triage and root cause analysis, convert recurring issues into durable fixes, and communicate exploitability, impact, and remediation • Support customer briefings, go-to-market enablement, blog posts, and conference talks

🎯 Requirements

• 2+ years managing engineers on an offensive security, red team, or attack engineering team, including hiring, performance management, and career development • 8+ years of combined offensive security and software engineering experience, with significant hands-on time attacking Active Directory and internal enterprise networks • Working command of current AD tradecraft, including Kerberos attacks and delegation, NTLM coercion and relay, AD Certificate Services abuse, ACL and GPO abuse, and lateral movement • Hands-on experience with Linux and Unix privilege escalation and lateral movement, database exploitation, and attacks on network services and devices • Comfortable reading and reviewing production Python and working in Git, merge request, CI/CD, and product development workflows • Experience turning offensive findings or manual techniques into product capabilities, automated tooling, or repeatable services • Sound judgment about operational safety when running offensive techniques against production customer environments • Record of building teams people want to join and stay on, with clear expectations, direct feedback, and engineers who grew under your leadership • Strong written and verbal communication with engineers, product partners, executives, and customers • Comfort setting direction in ambiguous situations without a fully defined roadmap • Experience leading teams that build autonomous pentesting, breach and attack simulation, or other offensive security products • Experience with SCCM, Windows Admin Center, and hybrid identity attacks, including Entra Connect, primary refresh tokens, and seamless SSO • Experience scaling network discovery and scanning with nmap, masscan, or nuclei across very large enterprise networks • Experience building LLM-powered agents or applying AI to offensive security or asset discovery workflows • Familiarity with graph databases such as Neo4j and attack-path analysis • OSCP, OSEP, CRTO, or equivalent offensive certifications • Public contributions such as open-source tools, technical blog posts, conference talks, or published CVEs • Experience managing a fully remote engineering team

🏖️ Benefits

• All full-time roles are eligible for an equity package in the form of stock options • Health, vision & dental insurance for you and your family • Flexible vacation policy • Generous parental leave • Growth opportunities and career development opportunities • Collaborative environment that encourages creativity and out-of-the-box thinking • Remote and hybrid work models depending on role and location

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume