Engineering Manager, Web Application Discovery

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and develop a team of engineers focused on web application discovery, crawling, and attack surface enumeration.

• Establish technical direction, set methodology standards, and define quality expectations.

• Mentor engineers to enhance coverage completeness, expand framework breadth, and ensure delivery reliability.

• Spearhead hiring initiatives and organizational growth.

• Oversee team performance by recognizing high achievers, addressing underperformance, and creating development opportunities.

• Take ownership of the NodeZero web application surface-discovery strategy.

• Direct crawling and spidering capabilities for JavaScript-heavy single-page applications (SPAs), multi-step authentication, session management, dynamic routing, and non-standard navigation.

• Guarantee comprehensive and consistent discovery coverage during the testing phase.

• Supervise benchmark and regression testing to prevent coverage loss.

• Collaborate with downstream teams to pinpoint discovery gaps leading to missed findings and prioritize necessary work.

• Transform discovery gaps into prioritized roadmap contributions and product capabilities in conjunction with Product and Engineering.

• Work alongside the Webapp Pen Testing team to align discovery coverage with testing coverage.

• Engage with architects and engineers to clarify technical requirements for complex discovery projects.

• Assist in defining quarterly technical roadmaps that balance framework coverage, reliability, and performance.

• Investigate coverage inquiries from customers and internal teams, addressing NodeZero discovery gaps.

⛳️ Requirements

• 3–5+ years of experience leading engineering, security, or offensive security teams.

• Proven experience managing teams of 4–8+ engineers.

• Demonstrated ability to balance hands-on technical depth with strategic and people-management responsibilities.

• Strong skills in coaching and performance management.

• Knowledge of modern web application architecture, including routing, authentication flows, session management, APIs, and framework-exposed surfaces.

• Familiarity with web crawling, spidering, and content discovery methods.

• Understanding of HTTP fundamentals, including request/response structures, cookies, headers, redirects, and state management.

• Capability to assess discovery-pass completeness and communicate findings effectively.

• Proficient in Python or a similar programming language.

• Familiarity with CI/CD workflows, ticketing systems such as Jira, and full product development life cycles.

• Experience in translating technical gaps into product roadmap contributions and prioritized engineering tasks.

• Excellent written and verbal communication skills.

• Customer-first mindset prioritizing completeness, reliability, and clarity in output.

• Practical experience with web crawling or scraping tools, browser automation tools such as Playwright, Puppeteer, or Selenium, or similar technologies.

• Familiarity with web application penetration testing.

• Knowledge of relational and graph databases, especially Postgres and Neo4j.

• OSCP, OSWE, or equivalent offensive security certifications are advantageous.

• Highly self-motivated and effective in ambiguous settings.

• Ability to work at both strategic and hands-on technical levels.

• Must be legally authorized to work in the United States; visa sponsorship requirements will be addressed in the application process.

🏝️ Benefits

• Equity package in the form of stock options for all full-time positions.

• Comprehensive health, vision, and dental insurance for you and your family.

• Flexible vacation policy.

• Generous parental leave.

• Opportunities for career development.

• An inclusive and collaborative workplace culture.

• Remote and hybrid work arrangements depending on role and location.

• Up to 10% travel for company kickoffs and team off-site events.