Engineering Manager (Web Application Discovery)

• Leadership & Team Development
• Lead and grow a team of engineers specializing in web application discovery, crawling, and attack surface enumeration
• Set technical direction, methodology standards, and quality expectations for the team’s deliverables
• Mentor engineers and raise the bar for coverage completeness, framework breadth, and the reliability of what the team ships
• Drive hiring and organizational scaling as the engineering team expands
• Actively manage performance across the team, recognizing high performers, addressing underperformance early, and creating opportunities for growth
• Discovery Strategy & Execution
• Own the team’s strategy for web application surface discovery within NodeZero ensuring the platform can reliably find pages, forms, API endpoints, parameters, and authentication surfaces across customer deployed applications
• Guide development of crawling and spidering capabilities that handle the real-world complexity of modern web applications: JavaScript-heavy SPAs, multi-step authentication flows, session management, dynamic routing, and non-standard navigation patterns
• Ensure discovery coverage is comprehensive and consistent to set the test phase up for success
• Oversee benchmark and regression testing to ensure coverage doesn’t silently degrade as applications and frameworks evolve
• Partner with the downstream teams to understand what discovery gaps are creating missed findings and prioritize work accordingly
• Product & Cross-Functional Partnership
• Partner with Product and software engineering teams to translate discovery gaps into prioritized roadmap input and productized capabilities
• Work closely with the Webapp Pen Testing team to create tight feedback loops between discovery coverage and test coverage — what doesn’t get found can’t get tested
• Engage with architects and engineers to ensure high-quality technical requirements on complex discovery initiatives
• Help define the team’s technical roadmap over quarterly horizons, balancing new framework coverage against reliability and performance improvements
• Work with customers and internal teams to investigate coverage questions and address gaps in what NodeZero discovers in their environments

Benefits

• Growth Opportunities: Be part of a dynamic and growing team with numerous career advancement opportunities
• Innovation-Driven Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking
• Inclusive and Diverse Team: We value diversity and promote an inclusive culture where everyone can thrive
• Flexible Work Environment: Enjoy the convenience and work-life balance that comes with remote work- 3–5+ years leading engineering, security, or offensive security teams
• Proven ability to balance hands-on technical depth with the strategic and people responsibilities of management
• Experience managing performance — both high performers and underperformers — with clarity and accountability
• Experience managing teams of 4–8+ engineers; comfort scaling a team as the organization grows
• Strong coaching instincts: able to assess talent, set growth goals, and develop engineers across experience levels
• Understanding of HTTP fundamentals: request/response structure, cookies and headers, redirects, state management, and how browsers and automated tools interact with web applications differently
• Ability to evaluate the completeness of a discovery pass: what was found, what was likely missed, and why, as well as being able to articulate that clearly to engineers and stakeholders
• Familiarity with web crawling, spidering, and content discovery techniques, including the challenges posed by single-page applications and multi-step authentication
• Solid understanding of how modern web applications are structured including routing, authentication flows, session management, APIs, and how different frameworks expose (or obscure) surfaces
• Experience in Python or similar to collaborate fluently with software engineers on remediation and product coverage
• Familiarity with CI/CD workflows, ticketing systems (e.g., Jira), and full product development life cycles
• Sufficient technical depth to evaluate the quality of team output, identify coverage gaps, and partner with senior ICs on technical direction
• Ability to prioritize and make strategic tradeoffs when PM support is limited
• Strong written and verbal communication skills across technical and non-technical audiences
• Experience translating technical gaps into product roadmap input and prioritized engineering work
• Customer-first mindset with a focus on completeness, reliability, and clear output
• Strong cross-functional partner across Engineering, Product, and GTM
• Highly self-directed and effective in ambiguous environments
• Able to operate at both strategic and hands-on technical levels: credible to practitioners on the team and to senior leadership alike
• Relentlessly curious about how modern web applications are built and how that affects what can and can’t be found automatically
• Maintains high standards for coverage completeness, reliability, and production safety across all team output
• Hands-on experience with web crawling or scraping tools, browser automation (e.g., Playwright, Puppeteer, Selenium), or similar content discovery tooling
• Certifications such as OSCP, OSWE, or comparable offensive security credentials are a plus
• Familiarity with web application pentesting, understanding how discovery feeds into testing, and what testers need from a discovery pass to do their jobs well
• Familiarity with relational and graph databases, particularly Postgres and Neo4j