Engineering Manager, Internal Attack

Leads the team behind NodeZero's internal attack capabilities at Horizon3.ai, the flagship function of the company's autonomous pentesting platform. The group of offensive engineers, from career level to Staff and Principal, owns attacks against Active Directory, Linux and Unix hosts, databases and network infrastructure, and turns modern tradecraft into attacks that run safely and autonomously across very large enterprise networks. This is a software team, not consulting or manual pentesting.

The manager hires and develops Attack Engineers and backend engineers, sets the strategy and roadmap for internal and AD coverage, and keeps that coverage working in hardened environments, from Kerberos-only authentication to enforced SMB and LDAP signing. The work spans credential access, delegation abuse, NTLM relay, AD Certificate Services, lateral movement and pivots into Entra ID, plus the host and service discovery the rest of the chain relies on. Production safety is a central duty, including lockout protection, handling of fragile devices and artifact cleanup. The role also directs backend work on the attack-path graph, owns the team's on-call rotation and supports customer briefings and external research.

The company wants at least two years leading people in offensive security, red teaming or attack engineering and eight or more years across offensive security and software engineering, with deep hands-on time attacking Active Directory. Fluency reading production Python and experience turning manual techniques into product capabilities are expected. The role is remote in the US.