Staff Software Engineer, Firewall
Horizon3 AI1 day ago
Remote, United StatesStaff+
Base Salary
$225k - $265k/yr
Responsibilities
- Own the technical direction of the Web Application Firewall workstream from design and sequencing through delivery, operation, and iteration.
- Design and build reliable integrations with WAF management platforms and their APIs across differing vendor policy models.
- Define correctness checks and remediation guidance that address validated attack paths while preserving legitimate traffic and service availability.
- Build durable, resumable workflows with retries, idempotency, timeouts, and partial-failure handling.
- Design tenant-scoped authorization, least-privilege controls, precondition checks, auditability, staged rollout, validation, recovery, and rollback for live traffic changes.
- Build observability that explains what the system assessed, recommends, and why.
- Contribute production code, shape architecture, lead design and code reviews, and improve quality, testing, security, and operational readiness.
- Partner with Product and technical teams to clarify scope, sequence work, manage dependencies, and connect decisions to customer outcomes.
- Mentor engineers and lead through influence, written decisions, and clear communication of risks and tradeoffs.
Requirements
- Expert-level proficiency in large-scale Python software development.
- 8+ years of experience leading technical work at Staff, Lead, or comparable scope, including architecture, implementation, and cross-team influence.
- Working knowledge of WAF platforms and policy models, including AWS WAF, Cloudflare, F5, Imperva, FortiWeb, or ModSecurity/OWASP CRS.
- Proficiency in another modern backend language such as Go or Rust, or a comparable language.
- Experience designing service-oriented systems, APIs, or integrations that handle failure and partial completion.
- Strong systems-design skills with sound tradeoffs across correctness, reliability, security, and maintainability.
- Ability to translate ambiguous product or customer problems into concrete technical plans and deliver outcomes with cross-functional partners.
- Clear technical writing and communication skills.
- Preferred experience includes API security, bot management, rate limiting, application security testing, network firewalls, security or infrastructure platform integrations, security products, safe automation, cloud environments, containerization, and operating services at scale.
Benefits
- Fully remote work arrangement with up to 10% travel required; the company also supports hybrid work depending on role and location.
- Base salary range of $225,000–$265,000 annually plus equity eligibility through stock options.
- Health, vision, and dental insurance for employees and families.
- Flexible vacation policy and generous parental leave.
- Inclusive, collaborative culture with career development and growth opportunities.
About Horizon3 AI
Horizon3 AI builds NodeZero, a proactive security platform that autonomously performs penetration testing and validates attack paths across on‑prem, cloud, and hybrid environments. The company sells its software by subscription to security and IT teams at enterprises and government agencies, helping prioritize and verify fixes. Founded in 2019 and headquartered in San Francisco, it is privately held and serves customers across regulated industries and the public sector.