Director of Engineering, Threat Research

Horizon3.ai

. Lead the engineering teams behind NodeZero Rapid Response and Threat Hunting products .

Posted 11/6/2026full-timeRemote • United StatesLead💰 $272,425 - $320,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading software engineering teams, particularly in cybersecurity and SaaS environments, with a strong focus on building high-performing organizations and establishing effective operational practices. Proficient in developing engineering strategies, fostering inclusive team cultures, and delivering customer-facing products with measurable outcomes.

Highest-signal resume keywords

Leadership In Software Engineering TeamsCybersecurity Product DevelopmentStrategic Planning And ExecutionVulnerability Research And Threat HuntingTechnical Judgment In Software Architecture

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonGoTypeScriptCI/CDAutomated TestingObservabilityIncident ResponseData SystemsProduction OperationsVulnerability Research

Soft Skills

CoachingPerformance FeedbackInclusive LeadershipCommunication SkillsAccountability

Tools & Technologies

Security TelemetryMITRE ATT&CKAI/LLM-Assisted ResearchCloud EnvironmentsLarge-Scale Software Products

Certifications & Qualifications

Bachelor’s Degree In Computer ScienceMaster’s Degree In EngineeringCybersecurity Certification

Industry Keywords

SaaSThreat HuntingIncident ResponseSecurity Product EngineeringExploitability Analysis

Tech Stack

Tools & technologies

AssemblyCloudCyber SecurityPythonRustTypeScriptC++Go

About the role

Key responsibilities & impact

Lead the engineering teams behind NodeZero Rapid Response and Threat Hunting products
Own engineering strategy, execution, and organizational health for both teams
Build a follow-the-sun vulnerability research capability with sub-teams in Europe and Asia
Lead and develop engineering organizations, setting ownership, goals, operating expectations, and measurable outcomes
Define engineering strategy and roadmaps connecting customer needs, product priorities, security research, and engineering investments
Build leadership structures through hiring, coaching, and developing managers, technical leaders, and senior individual contributors
Own talent planning, career development, feedback, performance, retention, and succession planning
Establish operating mechanisms for visibility into priorities, delivery, capacity, dependencies, quality, and risks
Foster an inclusive, psychologically safe culture with high standards for rigor, accountability, collaboration, and learning
Lead Rapid Response strategy and automation/AI-assisted research workflows
Connect asset and exposure context, technology fingerprints, patch information, and signals to customer notifications
Recruit and develop vulnerability researchers and leaders across regions
Design staffing models, regional ownership, handoffs, escalation paths, shared queues, and playbooks for 24/7 execution
Lead Threat Hunting engineering direction, including agent and product capabilities for investigating access, movement, and impact
Turn threat-hunting, SOC, and incident-response needs into scalable investigation workflows and customer-facing capabilities
Guide use of security telemetry, attack context, detection logic, and data integrations
Establish quality, reliability, observability, and evaluation practices
Ensure Threat Hunting integrates with NodeZero customer workflows, APIs, and integrations
Partner across Product, Engineering, Platform, Data, Marketing, Customer Success, Sales, and Channel
Drive complex cross-team initiatives from discovery through production
Maintain technical judgment across architecture, research automation, data-intensive systems, product quality, and operational readiness
Ensure strong practices across design, implementation, testing, release, monitoring, incident response, and production learning
Use customer feedback, product behavior, research outcomes, and field signals to improve organizational work
Communicate emerging-threat findings and product capabilities to technical and non-technical audiences

Requirements

What you’ll need

Significant experience leading software engineering teams building customer-facing products, ideally in cybersecurity or technically complex SaaS
Experience leading multiple teams and developing engineering managers and senior technical leaders
Track record of building accountable, high-performing organizations
Experience setting strategy and delivering across a portfolio with measurable outcomes
Experience building or scaling distributed teams and operational coverage across regions and time zones
Ability to establish sustainable 24/7 operating practices
Strong technical judgment in software architecture, automation, data systems, and production operations
Experience taking technically complex capabilities from research, prototype, or concept through reliable production delivery
Customer-oriented product mindset and sound judgment balancing innovation, speed, coverage, reliability, safety, and maintainability
Ability to build partnerships across Engineering, Product, and customer-facing teams
Commitment to coaching, clear performance feedback, inclusive leadership, and healthy team culture
Excellent written, verbal, and analytical communication skills
High degree of initiative, ownership, and accountability; comfort operating in ambiguity
Bachelor’s or Master’s degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience
Experience with production software engineering and at least one modern programming language such as Python, Go, TypeScript, or a comparable language
Understanding of CI/CD, automated testing, observability, incident response, and operational readiness
Ability to evaluate technical designs and establish quality controls for security-sensitive, customer-facing systems
Bonus: experience in vulnerability research, exploitability analysis, threat hunting, incident response, or detection engineering
Bonus: familiarity with SOC, threat-hunting, or incident-response workflows; security telemetry; attack techniques; and MITRE ATT&CK
Bonus: experience in vulnerability research, exploit development, threat intelligence, threat hunting, incident response, or security product engineering
Bonus: experience with AI/LLM-assisted research, analysis, or security workflows
Bonus: experience building follow-the-sun teams or leading global, time-sensitive operations
Bonus: contributions to vulnerability research, published advisories, open-source tooling, technical publications, or conference talks
Bonus: familiarity with reverse engineering or C, C++, Rust, or Assembly
Bonus: experience with cloud environments and large-scale software products

Benefits

Comp & perks

Equity package in the form of stock options for all full-time roles
Health, vision & dental insurance for you and your family
Flexible vacation policy
Generous parental leave
Career development opportunities
Remote and hybrid work models depending on role and location
Inclusive and collaborative culture
Up to 15% travel to support team, customer, and company needs