Horizon3AI
WebApp Offensive Security Software Engineer
$196K–$242K
US, Remote · Remote · Full-time · Posted Oct 30, 2026
About the job
Designs and develops web application penetration-testing capabilities for the NodeZero platform by finding gaps in autonomous testing, validating them safely, and translating findings into product improvements.
What you'll do
- Conduct web application penetration tests, validate missed edge cases, and create production-safe proof-of-concept exploits and test cases.
- Partner with engineers to improve detection and attack content; maintain regression and benchmark tests and monitor production pentests.
- Investigate results with customers and teams, document research, and mentor teammates.
What they ask for
- Experience conducting full-scope web application penetration tests.
- Experience with proxy tools like Burp and browser developer tools.
- Proficiency in object-oriented programming and test-driven development.
- Experience applying AI-assisted development tools to security research and automation tasks.
Nice to have
- Experience developing software and automation for web application pentesting.
- Experience fine-tuning language models or implementing retrieval-augmented generation (RAG) for security-focused applications.
Pay
$196,000 - $242,000 USD base salary
Tools
Burp, Postgres, Neo4j, Jira, LangChain, LangFlow, Model Context Protocol (MCP)
AI focus
Apply AI-assisted development to security research and automation; the role has a growing focus on AI-enhanced security techniques. Nice-to-haves include fine-tuning language models, RAG, and agentic workflows.
Model-written summary · the original posting is authoritative