Webapp Offensive Security Software Engineer, Horizon3

• Experience conducting full scope web application pentests
• Experience with proxy tools like Burp and with browser developer tools
• Proficient in object-oriented programming and test-driven development, with strong analytical and problem-solving skills
• Experience applying AI-assisted development tools to security research and automation tasks
• Curiosity about emerging AI technologies
• Skilled in designing, evaluating, and communicating technical solutions across systems, APIs, algorithms, and data structures
• Familiarity with relational and graph databases, particularly Postgres and Neo4j
• Strong written and verbal communication, including technical documentation
• Ability to manage multiple priorities, work independently, and mentor teammates of varying experience levels
• Quick to learn and adopt new technologies as needed
• History of recognized security research, including documented CVE discoveries and responsible disclosure
• Track record of successful bug bounty contributions
• Outstanding problem-solving aptitude
• Be self-motivated and highly energetic to have the ability to operate effectively with limited supervision and guidance
• Work with our security researchers to understand the technical aspects of reverse engineered exploits and weaponizing these exploits into the product
• Strong technical documentation and communication skills
• Document findings, methodologies, and recommendations for both technical and non-technical stakeholders
• Proficient in designing, presenting, and evaluating technical solutions

Desirable

• We're looking for an Offensive Security Software Engineer with extensive web application penetration testing experience and a growing interest in AI-enhanced security techniques
• You will have a significant impact on how we deliver value to our customers by designing, developing, and integrating web application penetration testing content into the NodeZero platform
• This position requires practical expertise in full-scope web application testing, proven software development skills, and enthusiasm for leveraging emerging AI technologies to advance offensive security capabilities
• Essential Functions
• Design, develop, and integrate web application offensive security content into the NodeZero platform
• Design, develop, and integrate novel attack capabilities into the NodeZero platform, including offensive security tooling and AI-enhanced techniques
• Research and implement AI-driven methods for vulnerability detection, exploitation, and workflow automation
• Extend and maintain platform architecture, data models, and system design to support new product features
• Monitor production for issues or missed opportunities and create or resolve Jira tickets as needed
• Integrate open-source and in-house tools, ensuring quality through testing, code reviews, and production monitoring
• Investigate, own, and resolve bugs in developed content
• Collaborate cross-functionally to address customer and prospect concerns related to attack content
• Author technical blog posts showcasing new research, exploits, or attack methodologies
• Mentor junior engineers and contribute to continuous improvement of team processes and standards