Principal Attack Engineer, AI/LLM

Get to Know Us Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs. We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results. An Overview We are hiring a Principal Attack Engineer specializing in AI/LLM security to define the long-term technical direction for AI/LLM offense at Horizon3 http://Horizon3.ai. You will lead the company’s most complex and consequential efforts to break AI and agentic systems and turn that research into scalable, autonomous attack capabilities inside NodeZero, our autonomous pentesting platform. This is not consulting or manual pentesting; the goal is to establish durable, production-grade capabilities that materially expand how NodeZero finds and validates exploitable attack paths across customer environments. The focus is LLM-based applications: the chatbots, copilots, RAG pipelines, and AI agents that enterprises expose to employees, customers, and the internet. You will operate at the intersection of company strategy and technical direction. You will shape the vision for AI/LLM offensive capabilities, partner with senior leadership on major technical and product decisions, and create the architecture, standards, and organizational alignment required for multiple teams to execute against that vision. This is a rare, company-wide role for a technical authority whose judgment influences the business and, where appropriate, the broader AI security field. What You’ll Do Company-wide Technical Leadership & Scope - Define the long-term technical vision for AI/LLM offense and its role in NodeZero and the company’s broader product strategy. - Partner with senior engineering, product, and business leadership to shape priorities, investment decisions, risk posture, and the roadmap for AI/LLM offensive capabilities. - Set direction for the most complex, high-risk, and business-critical AI/LLM programs; establish the outcomes and decision principles against which teams execute. - Lead cross-company initiatives that require alignment across Attack Engineering, Platform, Product, customer-facing teams, and other technical functions. - Diagnose systemic blockers in architecture, process, operating model, or technical capability and drive durable resolution. - Define company-wide standards for reliability, safety, observability, evaluation, testing, cost management, and operational readiness in LLM-powered offensive systems. - Develop P5 engineers and other senior technical leaders, multiplying the organization’s capacity to reason about and deliver AI/LLM security capabilities. - Communicate clearly with executives, technical leaders, and external stakeholders; bring the organization through major technical transitions with clarity