Manager, Attack Engineering

Get to Know Us

Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by ITOps/SecOps teams, consulting pentesters, and MSSPs and MSPs. 

We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.

Summary

We’re seeking an experienced Engineering Manager to lead our Cloud Attack organization across AWS, Azure, Kubernetes, OCI, GCP, and emerging AI-driven environments. In this role, you’ll oversee a team responsible for designing, validating, and scaling offensive capabilities within the NodeZero platform targeting modern cloud and enterprise systems.

You’ll operate at the intersection of offensive security, engineering, and product, driving both hands-on technical direction and strategic execution. This leader will ensure our cloud attack capabilities reflect real-world attacker tradecraft while remaining production-safe, high-signal, and impactful for customers.

Ideal candidates bring a strong mix of technical depth, leadership experience, and product mindset, and are excited to build and scale a team shaping the future of autonomous offensive security.

Essential Functions

Leadership & Team Development

• Lead and grow a team of Attack Engineers specializing in cloud providers, container orchestration platforms, and AI systems (AWS, Azure, OCI, GCP, Kubernetes).

• Set technical direction, priorities, and quality standards for cloud offensive capabilities.

• Mentor engineers and raise the bar for offensive rigor, delivery quality, and customer-facing clarity.

• Drive hiring and organizational scaling as the Cloud Ops team expands.

Cloud Offensive Strategy & Execution

• Own offensive strategy across:

  • AWS, Azure, OCI, GCP and multi-cloud environments

  • Kubernetes and container ecosystems

  • Identity, access, and enterprise platform layers

  • AI/LLM-integrated systems

• Guide development of end-to-end attack methodologies:

  • Discovery → exploitation → privilege escalation → lateral movement → impact → verification

• Ensure NodeZero capabilities are realistic, production-safe, and aligned with modern attacker tradecraft.

Product & Cross-Functional Partnership

• Partner with Product and Design to translate field insights into prioritized roadmap input and productized capabilities.

• Create tight feedback loops between real-world attack findings and platform evolution.

• Help define next-generation attack surfaces across cloud and AI systems.

Customer & External Impact

• Oversee high-impact customer engagements and technical briefings.

• Ensure clear articulation of exploitability, business impact, and remediation.

• Contribute to external content such as blogs, demos, and thought leadership where appropriate.

Competencies / Requirements

Leadership

• 5+ years leading offensive security, red team, or attack engineering teams.

• Experience managing teams of 6–10+ engineers and scaling organizations.

• Proven ability to balance hands-on technical depth with strategic leadership.

Cloud Offensive Security

• Strong expertise in one or more:

  • AWS, Azure, OCI, or GCP attack surfaces

  • Kubernetes / container security

  • Identity and access abuse (IAM, RBAC, federation, privilege escalation)

• Deep understanding of:

  • cloud misconfigurations and exploitation paths

  • data access and control-plane compromise