Senior Engineering Manager, Horizon3

• Demonstrated expertise leading teams that design, build, and operate containerized software (Docker, VM images) deployed into on-premise or customer-managed environments
• Experience implementing robust software supply chain practices — secure builds, image signing (cosign, Notary), reproducible builds, and vulnerability scanning in CI
• Experience designing and operating OTA update mechanisms for distributed agents or edge software at scale — including staged rollouts, rollback, and delivery verification
• Ability to reason about correctness in opaque, customer-controlled environments where you cannot observe failure modes directly
• Experience building or significantly growing an engineering team — including hiring, onboarding, and establishing engineering norms tailored for shipped software
• Proven ability to define and instill engineering culture: rigorous code review standards, robust testing across diverse customer environments, and a strong culture of ownership
• Drives high-impact architecture decisions rigorously — requires design documents, runs structured reviews, builds consensus, and ensures decisions account for customer environment variables
• Proficient in Go (preferred), Python, or C++
• Strong Linux OS-level operations: container runtimes, networking in corporate environments, systemd, process isolation
• Experience with CI/CD pipelines for building and signing container images (cosign, Notary v2, or equivalent)
• Familiarity with OTA update protocols and frameworks: TUF (The Update Framework), Omaha, or custom mechanisms
• Understanding of TLS, certificate pinning, and secure software delivery in hostile network environments

Desirable

• You will lead Client Platform — the team responsible for the software that lives in customer environments and makes NodeZero's autonomous pentests possible
• Client Platform owns two sub-teams: Image Build & Release (the factory that produces and signs the NodeZero runner container image) and OTA Services (the system that keeps runners current across thousands of customer environments)
• Every pentest NodeZero runs depends on this team's work being reliable, secure, and fast
• Team Building & Culture: Build, mentor, and grow Client Platform to ~10 engineers across Image Build & Release and OTA Services. You will directly manage the Engineering Managers of both sub-teams and set the technical and cultural direction for the full org. Establish engineering norms and a culture of ownership for a team whose software runs in environments you cannot control
• Image Build & Release: Lead end-to-end CI/CD workflows to create, sign, and reliably publish the NodeZero runner container image. Own software supply chain security: reproducible builds, image signing, SBOM generation, and vulnerability scanning in CI
• OTA Services: Architect and operate the over-the-air update delivery system that keeps NodeZero runners current across thousands of customer environments — reliably, securely, and without requiring manual customer IT intervention
• Security Research Partnership: Collaborate closely with Security Research to ensure the runner seamlessly executes new autonomous pentest capabilities as they ship
• Act as a Product Owner: Partner with product managers, security researchers, and customer success to manage the client-side roadmap

• In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information