Source Job

• Design and build production-grade Python reconnaissance workflows to discover and enumerate external-facing assets at scale.
• Research and parse messy external data sources to turn unstructured information into actionable attack intelligence.
• Automate multi-step attack paths from initial access to post-exploitation, and mentor engineers to raise the bar.

Horizon3 is a fast-growing, remote cybersecurity company that builds NodeZero, an autonomous pentesting platform. The team is a fusion of former special operations cyber operators and startup engineers, committed to a culture of respect, collaboration, and results.

• You'll lead and develop the Webapp and AI Attack engineering teams, setting direction, goals, and expectations.
• You'll own the strategy and execution of the portfolio, partnering with product, platform, and customer-facing teams.
• You'll guide capabilities from research through production, including web application testing and AI/LLM security assessments.

Horizon3 is a fast-growing, remote cybersecurity company that builds NodeZero, an autonomous pentesting platform for finding exploitable attack vectors. They are a fusion of former special ops cyber operators and engineers, committed to a culture of respect, collaboration, ownership, and results.

• Execute internal network and cloud-based SaaS penetration testing engagements.
• Identify, validate, and manually exploit vulnerabilities using public or custom-developed exploits.
• Deliver clear, client-ready reports with actionable remediation guidance to client stakeholders.

Pathfynder by A-LIGN is a technology-enabled cybersecurity company providing offensive and defensive cybersecurity services under A-LIGN, a security and compliance partner trusted by more than 2,400 global organisations. The company works with organisations ranging from small businesses to global enterprises in a fast-paced, collaborative, and remote-first environment.

• Lead research into GCP attack paths and identity trust relationships.
• Design and implement production-quality Python attack capabilities for cloud-native services.
• Set technical direction for GCP attack coverage and prioritize with product and engineering teams.

Horizon3 is a fast-growing, remote cybersecurity company that develops the NodeZero autonomous penetration testing platform. The company fosters a culture of respect, collaboration, ownership, and results, with a team comprised of former special operations cyber operators and engineers.

• Lead advanced security assessments across web applications, APIs, cloud platforms, and enterprise networks.
• Conduct red team activities, vulnerability research, and custom tool development to simulate real-world attacks.
• Collaborate with cross-functional teams to assess risks, support remediation, and mentor colleagues.

Hitachi Vantara provides data infrastructure for global innovators across industries. As a diverse, global team, they foster an inclusive culture focused on making a real-world impact with data.

• Define the long-term technical vision for AI/LLM offense and drive its integration into NodeZero's autonomous pentesting platform.
• Lead research and productization of attacks on LLM applications, agentic systems, and AI infrastructure.
• Partner with senior leadership to shape strategy, standards, and execution across engineering teams.

Horizon3 is a fast-growing, remote cybersecurity company building NodeZero, an autonomous pentesting platform. The team is a fusion of Special Operations cyber operators and startup engineers, with a culture of respect, collaboration, and results.

• Design and build red team agents, architecting harnesses, tools, and MCP servers to encode offensive tradecraft.
• Drive full-chain attack operations across Windows, Active Directory, on-prem, cloud, and network surfaces.
• Build detection-evasion capabilities, cyber ranges, and benchmarks to verify agent improvements against real defenses.

Cogent is an applied AI lab building AI agents for cybersecurity, using its AI Taskforce to assess petabytes of enterprise data and prevent breaches. Backed by Greylock and Bain Capital Ventures, the team includes experts from top universities, leading tech companies, and world-class cybersecurity firms.

• Lead, mentor, and grow a team of backend engineers and security practitioners with deep EDR expertise.
• Partner with a staff-level technical lead on architecture and with Product on roadmap and sequencing.
• Translate ambiguous goals into sequenced, deliverable work and establish operational discipline like design review and incident response.

Horizon3 is a remote cybersecurity company whose NodeZero platform delivers autonomous pentests to help organizations find and fix exploitable attack vectors before criminals exploit them. The company is a fast-growing team of former special ops cyber operators and engineers, committed to a culture of respect, collaboration, ownership, and results.

• Lead red team assessments and adversary emulation for space and mission systems.
• Develop attack plans, test cases, and Rules of Engagement with safety boundaries.
• Assess Linux, embedded, cloud, and network systems for exploitable weaknesses.

SIXGEN delivers agile, mission-ready cybersecurity solutions for government and critical infrastructure organizations. The company combines innovation and deep technical expertise to uncover vulnerabilities and strengthen operational resilience.

• Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.
• Validate vulnerabilities and configuration weaknesses to determine practical exploitability and develop realistic attack paths across web, cloud, identity, and infrastructure.
• Conduct purple-team exercises and translate offensive findings into actionable improvements for detection and response.

Backblaze is the object storage leader in the open cloud movement, providing cloud storage services to businesses, developers, and individuals. Founded in 2007 and publicly traded since 2021, the company generates over $136M in annual recurring revenue, manages over three billion gigabytes of data for 500K+ customers in 175+ countries, and fosters a culture centered on diversity, equity, and inclusion.

• Lead and grow the East Sales Engineering team across enterprise, commercial, and Federal coverage.
• Partner with sales leaders to align technical sales execution with regional priorities and advance opportunities from discovery through close.
• Set the quality bar for demos and trials, coach SEs, and act as an escalation point for complex customer and team issues.

SpecterOps is a cybersecurity company focused on identifying and fixing attack paths in Active Directory and Azure environments with BloodHound Enterprise. They emphasize a collaborative, customer-focused culture built on values like curiosity, empathy, and transparency.

• Plan and run authorized red team operations across cloud, Kubernetes, networks, identity systems, SaaS, and internal applications.
• Build and maintain AI-assisted testing harnesses for automated offensive security testing.
• Work collaboratively with Whatnot’s Blue Team on Purple Team engagements to strengthen security posture.

Whatnot is the largest live shopping platform in North America and Europe. They are one of the fastest growing marketplaces and were named the #1 Best Startup Employer in America, with a culture emphasizing low ego, growth mindset, and high impact.

• Lead IT strategy, operations, and service delivery for a global, remote-first security company, overseeing Help Desk, Corporate Systems, and Infrastructure teams.
• Own secure, reliable technology experiences including endpoint management, identity and access, collaboration tools, and employee onboarding.
• Partner with Security, Engineering, and Finance on IT budgets, vendors, security controls, and key performance metrics.

Horizon3 is a fast-growing, remote cybersecurity company whose NodeZero platform delivers autonomous pentesting to proactively find and fix exploitable attack vectors. The team blends former U.S. Special Operations cyber operators and engineers, fostering a culture of respect, collaboration, ownership, and results.

• Conduct original offensive research against Dia, including prompt injection, sandbox escape, and cross-profile data access.
• Threat model new surfaces with engineering teams and review features before they ship.
• Build automated vulnerability discovery systems, including fuzzing and AI-assisted hunting pipelines.

The Browser Company is building a better way to use the internet, with a focus on an AI-powered browser called Dia. They are a remote-first team of nearly 100 people who value diversity and craft.

• Plan, scope, execute, and report on penetration tests across cloud, endpoint, web, and API environments.
• Partner with development teams to embed security testing into their release cycles and mature SDLC practices.
• Lead quarterly red and purple team operations simulating real-world adversaries to test detection and response.

Group 1001 is a consumer-centric, technology-driven family of insurance companies that delivers value by combining financial strength with deep insurance expertise. The culture emphasizes collaboration, communication, risk management, and striving for outcomes, fostering a supportive work environment.

• Lead product, cloud, and AI security across Instructure.
• Own security architecture, vulnerability management, and release standards.
• Support customer security reviews and drive engineering commitments.

Instructure creates intuitive products that simplify learning and personal development, best known for its Canvas learning management system. The company has a flexible, inclusive culture, with competitive benefits and a strong employee recognition program.

• Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
• Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
• Partner with security engineering to turn findings into actionable defense improvements.

Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.

• Lead, coach, and develop a team of Security Consultants through regular feedback and performance management.
• Drive operational excellence by measuring team performance, identifying automation opportunities, and implementing process improvements.
• Act as a subject matter expert in web, network, cloud, or mobile security and handle complex escalations and appeals.

Bugcrowd is a preemptive security platform that unifies exposure discovery, offensive testing, and AI-driven intelligence to help organizations identify and validate real-world risk. Based in San Francisco and New Hampshire and supported by top venture capital firms, the company fosters a diverse, family-like culture with a broad range of backgrounds including musicians, adventurers, and parents.

• Manage a global 24/7 Security Operations Center, defining and streamlining processes, workflows, and playbooks.
• Lead and mentor a team of security analysts through weekly 1:1s, feedback, and career growth initiatives.
• Collaborate with product, support, and security teams to scale operations and operationalize new technologies.

Huntress is a remote-first cybersecurity company founded in 2015 by former NSA cyber operators, providing enterprise-grade security to businesses of all sizes. It secures over 5 million endpoints and 16 million identities worldwide with a 24/7 human-led Security Operations Center.

• Lead the build-out of key insider threat workstreams from design to operation.
• Support insider risk investigations with telemetry, evidence analysis, and written findings.
• Partner with Legal, HR, Privacy, and Compliance on case handling and escalation criteria.

Affirm provides buy now, pay later payment solutions that are transparent and free of hidden fees. As a remote-first fintech company, it prioritizes care, flexibility, and security for its employees and customers.