Jobs at Horizon3.ai

Lead offensive security research and development for Kubernetes attack capabilities within NodeZero. Research attack paths across workloads, identities, RBAC, secrets, nodes, clusters, networks, and cloud integrations; build production-quality Python automation; validate findings safely; and integrate results into customer-facing workflows. Own technical planning, design, code quality, documentation, cross-functional delivery, mentoring, and Kubernetes offensive-security strategy.

Research OCI attack paths, identity relationships, service misconfigurations, and attacker techniques. Build and validate production-quality Python offensive capabilities across OCI services, Kubernetes, storage, databases, secrets, and networking. Chain weaknesses into reliable attack paths, develop safe repeatable attack logic, improve testing and reliability, and collaborate with engineering and offensive security teams to integrate cloud attack capabilities into NodeZero.

Partners with account executives to support cybersecurity sales for SLED customers. Leads discovery, technical qualification, tailored demonstrations, proof-of-value engagements, technical deal strategy, objection handling, and post-sale technical continuity. Translates cybersecurity capabilities into business value, maintains customer relationships, identifies expansion opportunities, collaborates with product and engineering teams, and contributes to enablement materials and playbooks.

Lead research and development of GCP offensive security capabilities for the NodeZero platform. Identify cloud attack paths, IAM and service misconfigurations, and attacker techniques; build production-quality Python automation across GCP services; validate exploitability; improve attack reliability; shape the GCP roadmap; collaborate with engineering and security teams; document research; review code; and mentor engineers.

Leads architecture, development, deployment, and operations for Python backend services supporting internal penetration testing. Designs scalable ETL pipelines, distributed workflows, relational data models, SQL queries, GraphQL APIs, and graph-based attack-path data systems. Owns reliability, observability, performance, and production operations while coordinating cross-team initiatives. Provides technical direction, writes architecture documentation, mentors engineers, and partners with frontend, product, data, and attack teams to deliver customer-facing security results.

Leads engineering strategy, execution, and organizational health for Rapid Response and Threat Hunting teams. Builds distributed vulnerability research coverage across the US, Europe, and Asia; develops managers and technical leaders; and guides customer-facing cybersecurity products from research through reliable production. Oversees threat-hunting capabilities, security telemetry, integrations, quality, observability, incident response, and operational readiness while partnering across Product, Engineering, and customer-facing functions.

Conduct research at the intersection of AI, cybersecurity, and computer systems. Formulate research questions, design experiments, build prototypes, evaluate AI and security methods, analyze real-world security data, and communicate findings through reports, presentations, and potential publications. The role combines research with practical engineering and offers mentorship while developing independence.

Leads the Internal Attack Engineering team developing safe, autonomous offensive-security capabilities for enterprise networks. Responsibilities include hiring and developing engineers, setting strategy and roadmap, guiding Active Directory and broader network attack coverage, ensuring production safety, overseeing backend attack-path systems, managing execution and on-call escalations, and partnering with Product, Engineering, customers, and go-to-market teams. The role requires hands-on offensive-security and software-engineering credibility, strong management experience, and expertise in internal network attack tradecraft.

Drive net-new logo acquisition and revenue expansion across large state, local, and higher education accounts. Manage complex enterprise sales cycles, public procurement, RFPs, cooperative purchasing vehicles, channel partnerships, technical evaluations, and multi-year agreements. Build relationships with public-sector executives while developing territory plans and positioning autonomous security validation solutions. The role requires extensive SLED and cybersecurity or infrastructure software sales experience, strong CRM proficiency, and a record of closing complex six- and seven-figure transactions.

Drives net-new logo acquisition and revenue expansion across large state, local, and higher education accounts. Manages complex enterprise sales cycles, public procurement processes, RFPs, cooperative purchasing vehicles, channel partnerships, technical evaluations, and multi-year agreements. Builds relationships with public-sector technology and procurement leaders while collaborating with sales engineering, marketing, deal desk, and executive teams. Requires extensive SLED, cybersecurity or infrastructure software sales experience and a proven record of closing large enterprise transactions.

Drive net-new enterprise sales and revenue expansion across large state, local, and higher-education accounts in Texas. Manage complex SaaS and cybersecurity sales cycles, public procurement, RFPs, cooperative purchasing vehicles, channel partnerships, technical evaluations, and multi-year agreements. Build relationships with public-sector executives and exceed quotas through strategic territory planning, direct prospecting, and ecosystem collaboration.

Build and operate full-stack product capabilities for a cybersecurity platform, with an 80% backend and 20% frontend focus. Own moderate-to-large projects from technical design through rollout, develop APIs and distributed services, create modern web experiences, and ensure reliability, observability, and maintainability. Collaborate with Product, Design, and engineering teams, contribute to architecture, conduct code reviews, mentor engineers, and improve product quality and execution.

Own revenue growth through the Pax8 MSP channel by recruiting and enabling partners, managing inbound and outbound opportunities, conducting consultative discovery, presenting NodeZero solutions, negotiating agreements, and closing business. Maintain forecasts and pipeline discipline while collaborating with Pax8, Marketing, Engineering, and technical resources. Translate cybersecurity capabilities into profitable managed services and measurable customer value. The fully remote role includes up to 20% travel for partner engagements, events, and business development.

Build and operate the platform powering autonomous defensive agents, including durable workflows, tool and connector frameworks, safe-change pipelines, tenant isolation, ETL, GraphQL services, observability, and audit trails. Develop React and TypeScript operator interfaces with WebSocket streaming for long-running workflows. Partner with AI researchers and security teams to productionize agent capabilities safely across thousands of customer tenants.

Set technical direction for enterprise platform services supporting licensing, entitlements, account administration, onboarding, provisioning, notifications, and partner workflows. Design secure, scalable multi-tenant architectures and lead cross-team technical initiatives from ambiguity to implementation. Improve reliability through observability, testing, safe deployments, incident learning, and operational documentation. Contribute hands-on through design and code reviews, mentor senior engineers, and influence engineering, product, and business stakeholders.

Lead the technical direction of backend systems for a cybersecurity assessment platform. Design and build scalable services, APIs, data models, and event-driven workflows; make architecture and reliability decisions; write production code; improve observability and safe deployment practices; lead cross-team initiatives; mentor engineers; contribute to hiring; and translate customer and product goals into technical strategy.

Build and operate backend services and APIs for secure, multi-tenant administration workflows, including user access, account hierarchies, settings, roles, access controls, and audit logs. Own features from design through production support, applying strong data modeling, authorization, testing, observability, and reliability practices. Collaborate with Product and engineering teams, investigate production issues, document systems, and mentor teammates.

Design, build, test, and support integrations between NodeZero and security, SIEM, SOAR, and ITSM platforms. Own integrations from partner API requirements through production launch and support. Develop reliable patterns for authentication, event delivery, retries, idempotency, pagination, rate limits, and schema mapping. Improve shared frameworks, testing, documentation, and observability; troubleshoot production issues; and collaborate with product, engineering, and partner teams on architecture and technical requirements.

Own and improve IT automation across onboarding, offboarding, device logistics, identity, and business workflows. Manage Workato recipes, connections, monitoring, alerts, and failure response while building Okta, Jira, and Rovo workflows. Establish IT-as-code practices using Terraform, CI/CD, Python, Bash, and Linux. Partner with Security Operations and Business Applications, maintain at least 99% flow reliability, document runbooks, investigate root causes, and report reliability metrics to leadership.

Leads architecture and hands-on development of backend services supporting multi-tenant MSSP partner workflows. Responsibilities include tenant isolation, account hierarchies, delegated administration, API design, reliability, observability, production issue ownership, and mentoring engineers. The role partners across Product and Engineering to deliver secure, reliable cloud-hosted platform capabilities for client and sub-client management.