Senior Web App Offensive Security Engineer | AI-PenTesting

Horizon3; United States; Hybrid; USD 170,000 - 260,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Innovative Culture

Hybrid & Remote Work

Competitive Compensation

Job summary

Horizon3 seeks a Senior/Staff Offensive Security Software Engineer to expand our NodeZero platform with web application pentesting content and AI-enhanced security capabilities.

You will work with software engineers to translate findings into product improvements, build regression test libraries, and mentor teammates while contributing to blueprints for detection logic and remediation.

Qualifications

• Experience conducting full scope web application pentests.
• Experience with proxy tools like Burp and browser developer tools.
• Proficient in OOP and test-driven development with strong problem-solving skills.
• Experience applying AI-assisted development tools to security research and automation tasks.
• Curiosity about emerging AI technologies.
• Strong communication across systems, APIs, data structures and algorithms.
• Familiar with Postgres and Neo4j databases.
• Strong technical writing and documentation skills.
• Ability to mentor teammates and manage multiple priorities.

Responsibilities

• Perform hands-on, full-scope web app pentests on real customer apps and lab targets.
• Review NodeZero results to identify coverage gaps and edge cases.
• Reproduce edge cases and build production-safe PoCs and test cases.

Skills

Full scope web app pentests

Burp proxy

Browser dev tools

Object-oriented programming

Test-driven development

AI-assisted development tools

Technical documentation

Communication skills

Security research / CVEs

Bug bounty contributions

Relational databases

Graph databases

Independent work / mentoring

Education

OSCP Certification

Tools

Burp Suite

LangChain

LangFlow

PostgreSQL

Neo4j

Job description

Horizon3 seeks a Senior/Staff Offensive Security Software Engineer to expand our NodeZero platform with web application pentesting content and AI-enhanced security capabilities.

You will work with software engineers to translate findings into product improvements, build regression test libraries, and mentor teammates while contributing to blueprints for detection logic and remediation.