Engineering Manager, Web Application Discovery

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $225.3k - $265k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♀️ Software Engineering Manager

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Horizon3.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Horizon3. ai is a cybersecurity company that specializes in autonomous penetration testing through its platform, NodeZero. The company's mission is to proactively identify and address attack vectors before they can be exploited, allowing organizations to continuously assess their security posture across various environments including cloud, IoT, and on-premises systems. Founded by veterans from the US Special Operations and National Security sectors, Horizon3. ai offers a self-service SaaS solution that provides organizations with insights into their security vulnerabilities without requiring persistent or credentialed agents.

📋 Description

• Lead and grow a team of engineers specializing in web application discovery, crawling, and attack surface enumeration • Set technical direction, methodology standards, and quality expectations • Mentor engineers and improve coverage completeness, framework breadth, and delivery reliability • Drive hiring and organizational scaling • Manage team performance, recognize high performers, address underperformance, and create growth opportunities • Own the NodeZero web application surface-discovery strategy • Guide crawling and spidering capabilities for JavaScript-heavy SPAs, multi-step authentication, session management, dynamic routing, and non-standard navigation • Ensure comprehensive and consistent discovery coverage for the testing phase • Oversee benchmark and regression testing to prevent coverage degradation • Partner with downstream teams to identify discovery gaps causing missed findings and prioritize work • Translate discovery gaps into prioritized roadmap input and productized capabilities with Product and Engineering • Collaborate with the Webapp Pen Testing team to connect discovery coverage with test coverage • Engage architects and engineers on technical requirements for complex discovery initiatives • Help define quarterly technical roadmaps balancing framework coverage, reliability, and performance • Investigate coverage questions with customers and internal teams and address NodeZero discovery gaps

🎯 Requirements

• 3–5+ years leading engineering, security, or offensive security teams • Experience managing teams of 4–8+ engineers • Proven ability to balance hands-on technical depth with strategic and people-management responsibilities • Strong coaching and performance-management skills • Understanding of modern web application structure, including routing, authentication flows, session management, APIs, and framework-exposed surfaces • Familiarity with web crawling, spidering, and content discovery techniques • Understanding of HTTP fundamentals, including request/response structure, cookies, headers, redirects, and state management • Ability to evaluate discovery-pass completeness and articulate findings clearly • Experience in Python or a similar language • Familiarity with CI/CD workflows, ticketing systems such as Jira, and full product development life cycles • Experience translating technical gaps into product roadmap input and prioritized engineering work • Strong written and verbal communication skills • Customer-first focus on completeness, reliability, and clear output • Hands-on experience with web crawling or scraping tools, browser automation such as Playwright, Puppeteer, or Selenium, or similar tooling • Familiarity with web application penetration testing • Familiarity with relational and graph databases, particularly Postgres and Neo4j • OSCP, OSWE, or comparable offensive security certifications are a plus • Highly self-directed and effective in ambiguous environments • Ability to operate at strategic and hands-on technical levels • Must be legally authorized to work in the United States; visa sponsorship requirements are addressed in the application

🏖️ Benefits

• Equity package in the form of stock options for all full-time roles • Health, vision, and dental insurance for you and your family • Flexible vacation policy • Generous parental leave • Career development opportunities • Inclusive and collaborative culture • Remote and hybrid work models depending on role and location • Up to 10% travel for company kickoffs and team off-sites