WebApp Offensive Security Software Engineer
Horizon3 · Remote · US, Remote ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior/Staff level
- Fully remote or hybrid
- Web App Pentesting
- AI-enhanced security
- Equity package included
Join Horizon3 to design and integrate web application penetration testing content into the NodeZero autonomous pentesting platform. You will perform hands-on testing, identify coverage gaps, and translate findings into product improvements while leveraging AI technologies.
What you'll do
- Perform full-scope web application penetration tests on customer and lab targets
- Review autonomous test results to identify coverage gaps and blind spots
- Reproduce edge cases and build production-safe proof-of-concept exploits
- Partner with engineers to define detection logic and attack content
- Maintain regression and benchmark test case libraries
- Monitor production pentests and triage Jira tickets for resolution
- Author technical blog posts and research write-ups on new exploits
- Mentor teammates and improve team testing standards
What you'll need
- Experience conducting full-scope web application penetration tests
- Proficiency with proxy tools like Burp and browser developer tools
- Strong object-oriented programming and test-driven development skills
- Experience applying AI-assisted tools to security research
- Familiarity with relational and graph databases like Postgres and Neo4j
- Strong written and verbal communication for technical documentation
- History of recognized security research or CVE discoveries
- Track record of successful bug bounty contributions
Nice to have
- Experience developing software automation for pentesting
- Background in large-scale software development projects
- Experience fine-tuning language models or implementing RAG
- Experience with AI/LLM tools like LangChain or LangFlow
- OSCP (Offensive Security Certified Professional) Certification
- Demonstrated use of AI to automate exploit development
Stack
- NodeZero
- Burp Suite
- Postgres
- Neo4j
- LangChain
- LangFlow
- Jira
How you'll work
- Remote work model with some hybrid options
- Chicago office available for roles requiring presence
- Self-motivated work with limited supervision
What you get
- Competitive base salary range $196k-$242k
- Equity package in the form of stock options
- Health, vision, and dental insurance for family
- Flexible vacation policy
- Generous parental leave
- Inclusive and collaborative culture