Drimva

Horizon3AI

Staff Software Engineer, Tripwires

$229K–$270K

US, Remote · Remote · Staff · Full-time · Posted Jul 28, 2026

Experience
Minimum 4 years building offensive or defensive security solutions.
Education
Bachelor's degree in Computer Science, Computer Engineering, or related field; equivalent experience may be considered if demonstrated through proof-of-concept write-ups, published vulnerability research, or similar achievements.

About the job

Build and lead development of Tripwires and related deception capabilities in NodeZero, using honeytokens and honeypots to detect attacker activity and alert defenders.

What you'll do

  • Set technical direction and design, prototype, ship, and iterate on security features.
  • Develop honeytoken and honeypot creation, deployment, and detection logic for Tripwires and related products.
  • Partner with product, design, and engineering; mentor engineers and translate product goals into technical roadmaps.

What they ask for

  • Expert-level proficiency in large-scale Python software development.
  • Deep network security experience, including topics such as reconnaissance and lateral movement; proficiency with Active Directory, Windows authentication, and Windows internals; strong understanding of SMB and WMI.
  • Experience with relational (Postgres) or graph (Neo4j) databases.
  • At least 4 years building offensive or defensive security solutions; a bachelor's degree in Computer Science, Computer Engineering, or a related field, or equivalent experience demonstrated through relevant work such as proof-of-concept write-ups or published vulnerability research.

Nice to have

  • OSCP, GCWN, or equivalent certification.
  • Experience with large-scale software projects, cloud environments, Docker/containerization, identity and directory services, or cloud authentication and authorization.

Pay

USD $229,000 - $270,000 annually (base salary)

Tools

Python, Postgres, Neo4j, SMB, WMI, Active Directory, Docker, Entra ID

Model-written summary · the original posting is authoritative

First seen Oct 29, 2026 · Last verified Nov 5, 2026 (UTC)