horizon3ai Director of Engineering for Webapp & AI Attack at horizon3ai leading teams to develop offensive security capabilities for NodeZero. Responsible for strategy, execution, and organizational health of the portfolio.
Responsibilities
As Director of Engineering for Webapp and AI Attack, you’ll set direction and lead the teams that turn Webapp and AI related offensive security expertise into dependable, customer-facing NodeZero capabilities. You’ll own the strategy, execution, and organizational health of this portfolio, partnering with engineering managers, technical leaders, Product, Platform, and customer-facing teams.
You’ll guide capabilities from discovery and research through productization and ongoing operation. That includes improving how NodeZero maps and tests modern web applications, and building responsible, repeatable ways to assess AI-enabled and agentic systems. This is a people and portfolio leadership role: you’ll maintain enough technical depth to shape decisions and raise the quality bar while enabling teams and technical leaders to own implementation.
Organization Leadership & Strategy
Lead and develop the Webapp and AI Attack engineering teams, setting clear ownership, goals, and expectations across the portfolio.
Define a coherent strategy and roadmap that connect customer needs, product priorities, offensive research, and durable engineering investments.
Build an effective leadership structure as the organization grows; hire, coach, and develop engineering managers, technical leaders, and senior individual contributors.
Set operating mechanisms that make outcomes, progress, capacity, quality, dependencies, and risks visible without adding unnecessary process.
Own the health and performance of the organization, including talent planning, career development, timely feedback, accountability, and succession planning.
Foster an inclusive, psychologically safe environment where teams can raise risks, learn from failures, and do their best work.
Webapp Attack Capabilities
Set direction for NodeZero’s web application attack portfolio, spanning application discovery, crawling and browser automation, authentication and session handling, attack coverage, and the feedback between discovery and testing.
Ensure the platform can reliably map pages, forms, APIs, parameters, and authentication surfaces across modern applications—including JavaScript-heavy single-page applications and complex user flows.