WebApp Offensive Security Software Engineer

Home > Other programming jobs

WebApp Offensive Security Software Engineer in USA new

Horizon3 AI
Full time
Email

USA
10/31/2026
Report

Remote

Responsibilities

Conduct hands-on, full-scope web application penetration tests against customer, benchmark, and laboratory targets.
Review NodeZero results to identify coverage gaps, blind spots, false positives, and missed attack scenarios.
Manually reproduce and validate edge cases and build production-safe proof-of-concept exploits and end-to-end test cases.
Translate security findings into detection logic, attack content, expected behavior, and remediation in partnership with software engineers.
Build and maintain regression and benchmark test cases to prevent coverage regressions.
Monitor production pentests, create and triage Jira tickets, and drive issues to resolution.
Work with customers and internal teams to investigate findings, explain attack paths, and answer coverage questions.
Author technical blog posts, research write-ups, findings, methodologies, and recommendations.
Mentor teammates and improve team processes, methodologies, and testing standards.
Collaborate with security researchers to understand reverse-engineered exploits and weaponize them in the product.

Requirements

Experience conducting full-scope web application penetration tests.
Experience with Burp and browser developer tools.
Proficiency in object-oriented programming and test-driven development.
Experience applying AI-assisted development tools to security research and automation tasks.
Ability to design, evaluate, and communicate technical solutions involving systems, APIs, algorithms, and data structures.
Familiarity with relational and graph databases, particularly Postgres and Neo4j.
Strong written and verbal communication and technical documentation skills.
Ability to manage multiple priorities, work independently, and mentor teammates of varying experience levels.
Recognized security research, including documented CVE discoveries and responsible disclosure.
A track record of successful bug bounty contributions.
Preferred experience developing software and automation for web application penetration testing and working on large-scale software projects.
Preferred experience fine-tuning language models, implementing RAG for security applications, or building agentic workflows with AI/LLM tools such as LangChain and LangFlow.
OSCP certification is a preferred qualification.

Benefits

Hybrid and remote work models are available depending on role and location, with some Chicago roles requiring regular in-office presence.
Health, vision, and dental insurance are provided for employees and their families.
Flexible vacation policy and generous parental leave are offered.
Full-time roles are eligible for an equity package in the form of stock options.
The company offers growth opportunities, an inclusive culture, and a collaborative environment encouraging creativity.

Salary: $196k - $242k/yr

Horizon3 AI

Horizon3.ai answers the two most important questions in cybersecurity: If someone tried to compromise us, would we hold up? And, how do we withstand the onslaught of AI-powered attacks? Horizon3.ai’s NodeZero® shifts the advantage from attackers to defenders by giving organizations the power to f...

Similar positions

Expert Software Engineer _ Workday Finance

LE9220 Veradigm India Private Limited - Pune
Full time

Others
10/31/2026

Pune, India

Developer Relations Engineer

Canonical
Full time

Remote
10/31/2026

APAC, EMEA

Senior Ai/ML Engineer

Redhorse Corporation
Full time

USA
10/31/2026
Salary: $180k - $200k/yr

Remote

Software Engineer, Foundation

Clera
Full time

Others
10/31/2026

Berlin, Germany

Software Release & Configuration Manager

Quantum- Systems GmbH
Full time

Others
10/31/2026

Germany