← All roles

Engineering Manager, Web Application Discovery

Horizon3 AI· Engineering
Apply on company site
RemoteFull-timePosted 1mo ago

About the role

Engineering Manager for web application discovery within Horizon3's NodeZero platform, leading a team of engineers focused on web crawling, surface discovery, and attack surface enumeration in a remote, fully distributed environment.

Responsibilities

  • Lead and grow a team of engineers specializing in web application discovery, crawling, and attack surface enumeration.
  • Set technical direction, methodology standards, and quality expectations for the team's deliverables.
  • Mentor engineers and raise the bar for coverage completeness, framework breadth, and the reliability of what the team ships.
  • Drive hiring and organizational scaling as the engineering team expands.
  • Actively manage performance across the team, recognizing high performers, addressing underperformance early, and creating opportunities for growth.
  • Own the team's strategy for web application surface discovery within NodeZero ensuring the platform can reliably find pages, forms, API endpoints, parameters, and authentication surfaces across customer deployed applications.
  • Guide development of crawling and spidering capabilities that handle the real-world complexity of modern web applications: JavaScript-heavy SPAs, multi-step authentication flows, session management, dynamic routing, and non-standard navigation patterns.
  • Ensure discovery coverage is comprehensive and consistent to set the test phase up for success.
  • Oversee benchmark and regression testing to ensure coverage doesn't silently degrade as applications and frameworks evolve.
  • Partner with the downstream teams to understand what discovery gaps are creating missed findings and prioritize work accordingly.
  • Partner with Product and software engineering teams to translate discovery gaps into prioritized roadmap input and productized capabilities.
  • Work closely with the Webapp Pen Testing team to create tight feedback loops between discovery coverage and test coverage — what doesn't get found can't get tested.
  • Engage with architects and engineers to ensure high-quality technical requirements on complex discovery initiatives.
  • Help define the team's technical roadmap over quarterly horizons, balancing new framework coverage against reliability and performance improvements.
  • Work with customers and internal teams to investigate coverage questions and address gaps in what NodeZero discovers in their environments.

Qualifications

  • 3–5+ years leading engineering, security, or offensive security teams.
  • Experience managing teams of 4–8+ engineers; comfort scaling a team as the organization grows.
  • Proven ability to balance hands-on technical depth with the strategic and people responsibilities of management.
  • Strong coaching instincts: able to assess talent, set growth goals, and develop engineers across experience levels.
  • Experience managing performance — both high performers and underperformers — with clarity and accountability.
  • Solid understanding of how modern web applications are structured including routing, authentication flows, session management, APIs, and how different frameworks expose (or obscure) surfaces.
  • Familiarity with web crawling, spidering, and content discovery techniques, including SPAs and multi-step authentication.
  • Understanding of HTTP fundamentals: request/response structure, cookies and headers, redirects, state management, and how browsers and automated tools interact with web applications differently.
  • Ability to evaluate the completeness of a discovery pass and articulate gaps to engineers and stakeholders.
  • Experience in Python or similar to collaborate with software engineers on remediation and product coverage.
  • Familiarity with CI/CD workflows, Jira, and full product development life cycles.
  • Sufficient technical depth to evaluate the quality of team output, identify coverage gaps, and partner with senior ICs on technical direction.
  • Experience translating technical gaps into product roadmap input and prioritized engineering work.
  • Ability to prioritize and make strategic tradeoffs when PM support is limited.
  • Strong written and verbal communication skills across technical and non-technical audiences.
  • Customer-first mindset with a focus on completeness, reliability, and clear output.

Skills

Required:Web application discovery and crawlingPythonCI/CD and JiraLeadership and people managementProduct roadmap collaboration

Benefits

  • Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive.
  • Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities.
  • Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking.
  • Hybrid & Remote Work: We embrace a mix of remote and hybrid work models depending on role and location, including our Chicago office, where some roles require regular in-office presence.
  • Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave.
Last updated Sep 3, 2026. Interested? Apply on the company site.

About Horizon3 AI

Only Pentesting Platform Proven in Production

Continuously assess, fix, and verify your security posture. Securing enterprises across many attack surfaces.

PentestingSecurity PostureThreat DetectionVulnerabilitiesRisk AssessmentOffensive Security
Company profileWebsite

More open roles at Horizon3 AI