Job description

Get to Know Us Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by ITOps/SecOps teams, consulting pentesters, and MSSPs and MSPs. We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results. WHAT YOU'LL DO You'll be joining Growth & MSSP - the team that owns the foundational control plane governing what customers can access, what they've purchased, and how they're administered across NodeZero. If the Pentest Platform is the engine, Enterprise Platform is the operating model that determines who gets to use it and how. The team's work spans licensing and entitlements, admin experience, provisioning, notifications, MSP/MSSP capabilities, and auditability. These aren't just internal systems - they're the services that directly shape how customers, administrators, and service providers experience NodeZero every day. Getting them right means building for correctness, consistency, and trust across a complex multi-tenant commercial model. This is a senior individual contributor role. You'll lead through technical judgment, careful system design, and reliable execution - owning significant pieces of platform infrastructure while contributing to a team that balances feature delivery with long-term platform investment and production health. In this role, you will: - Design and implement backend services that enforce licensing, entitlements, feature access, usage limits, and packaging rules consistently across NodeZero's product, APIs, and partner workflows. - Build and evolve provisioning and onboarding workflows - account setup, entitlement propagation, and auto-provisioning that reliably activates customers without manual intervention. - Develop admin experience infrastructure: user access controls, account settings, parent-child account relationships, and the RBAC/authorization patterns that make multi-tenant administration safe and auditable. - Build MSP/MSSP capabilities - asset allocation, sub-client management, usage visibility, and reporting workflows that let service providers manage multiple customer environments at scale. - Implement audit logging and event history systems that capture administrative, entitlement, usage, and account-level actions for support, compliance, and customer trust. - Develop the notifications platform: usage warnings, consumption alerts, overage notices, product announcements, and other transactional and non-transactional communications. - Operate these services in production - contributing to monitoring, runbooks, incident response, and support workflows for systems customers depend on daily. - Contribute production code that sets the standard for design quality, test coverage, observability, and operational rigor. - Collaborate with adjacent teams - Pentest Data Platform and the Platform Integration Team - to ensure entitlement, access, and account-hierarchy rules are applied consistently wherever NodeZero data is exposed. What You'll Bring - Ability to own and manage concurrent initiatives, with strong judgment in prioritization and time management. - Self-directed and driven - capable of conceiving and implementing solutions independently and as part of a team. - A strong desire to continuously learn new technologies in a fast-paced Agile environment. - Excellent analytical and problem-solving skills, with high attention to detail and a high bar for quality - particularly for systems where correctness has commercial and compliance implications. - Strong technical documentation ability, including design docs, runbooks, and support documentation. - Effective communication and collaboration across engineering, product, and design. - Interest in mentoring junior and mid-level engineers. Required Education / Experience - Bachelor's Degree in Computer Science, Computer Engineering, or a related field. - 7+ years of professional software engineering experience using modern object-oriented or functional languages (Python, Go, TypeScript, Java, Scala, C++, etc.). - Experience building production applications on cloud platforms (AWS, Azure, GCP) using Docker and Kubernetes. Desired Skills: - Experience building multi-tenant SaaS platforms with strong tenant isolation - particularly around access controls, data scoping, and account hierarchy. - Hands-on experience with RBAC, authorization, authentication, or SSO systems, and the patterns that make them consistent and auditable at scale. - Experience with licensing, subscription, entitlement, usage metering, or billing-adjacent systems - especially where correctness and consistency across services matter. - Experience designing and building audit log or event history systems with compliance or support requirements in mind. - Familiarity with provisioning and feature-access patterns - auto-provisioning, feature flags, and staged rollout for commercial SaaS products. - Experience building admin consoles or customer self-service workflows, including parent-child or multi-org account management. - Experience with MSP, MSSP, or multi-tenant partner models - asset allocation, sub-account management, and usage/reporting visibility. - Experience with notifications infrastructure - transactional and non-transactional communications, delivery reliability, and preference management. - Production reliability experience: observability tooling, on-call ownership, runbook authorship, and incident response for foundational platform services. - Expert proficiency in SQL and experience with relational database architectures (PostgreSQL); comfort with complex data models involving account hierarchies, usage records, and entitlement state. Perks of Horizon3 - Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive. - Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities. - Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking. - Hybrid & Remote Work: We embrace a mix of remote and hybrid work models depending on role and location, including our Chicago office, where some roles require regular in-office presence. - Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave. Compensation and Values At Horizon3, we believe that our people are our greatest asset, and our compensation philosophy reflects this core value. We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions. Our compensation structure is designed to be fair, competitive, and transparent, ensuring that every team member is recognized and compensated equitably across roles, levels, and locations. In accordance with various State’s transparency regulations, we provide the following salary range information for this position: - Base salary range: $170,000 - $235,000 annually. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills. - Additional compensation: All full-time roles are eligible for an equity package in the form of stock options. You Belong Here Horizon3 is not just an equal opportunity employer - we are a community that values diversity, equity, and inclusion as fundamental principles of our culture and success. We are dedicated to fostering a workplace where everyone feels welcome and respected, regardless of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, or any other legally protected status by law. Our commitment to diversity and inclusion means we strive to attract, develop, and retain a workforce that reflects the varied communities we serve. We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions. At Horizon3, every team member is valued and supported in an environment that encourages personal and professional growth. We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply. Come be a part of Horizon3, where your unique contributions are recognized, and your potential is limitless. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

Requirements

Must-haves

Get to Know Us
Design and implement backend services that enforce licensing, entitlements, feature access, usage limits, and packaging rules consistently across NodeZero's product, APIs, and partner workflows.
Build and evolve provisioning and onboarding workflows - account setup, entitlement propagation, and auto-provisioning that reliably activates customers without manual intervention.
Develop admin experience infrastructure: user access controls, account settings, parent-child account relationships, and the RBAC/authorization patterns that make multi-tenant administration safe and auditable.
Build MSP/MSSP capabilities - asset allocation, sub-client management, usage visibility, and reporting workflows that let service providers manage multiple customer environments at scale.
Implement audit logging and event history systems that capture administrative, entitlement, usage, and account-level actions for support, compliance, and customer trust.
Develop the notifications platform: usage warnings, consumption alerts, overage notices, product announcements, and other transactional and non-transactional communications.
Operate these services in production - contributing to monitoring, runbooks, incident response, and support workflows for systems customers depend on daily.
Contribute production code that sets the standard for design quality, test coverage, observability, and operational rigor.
Collaborate with adjacent teams - Pentest Data Platform and the Platform Integration Team - to ensure entitlement, access, and account-hierarchy rules are applied consistently wherever NodeZero data is exposed.
Ability to own and manage concurrent initiatives, with strong judgment in prioritization and time management.
Self-directed and driven - capable of conceiving and implementing solutions independently and as part of a team.

Nice-to-haves

Experience building multi-tenant SaaS platforms with strong tenant isolation - particularly around access controls, data scoping, and account hierarchy.
Hands-on experience with RBAC, authorization, authentication, or SSO systems, and the patterns that make them consistent and auditable at scale.
Experience with licensing, subscription, entitlement, usage metering, or billing-adjacent systems - especially where correctness and consistency across services matter.
Experience designing and building audit log or event history systems with compliance or support requirements in mind.
Familiarity with provisioning and feature-access patterns - auto-provisioning, feature flags, and staged rollout for commercial SaaS products.
Experience building admin consoles or customer self-service workflows, including parent-child or multi-org account management.
Experience with MSP, MSSP, or multi-tenant partner models - asset allocation, sub-account management, and usage/reporting visibility.
Experience with notifications infrastructure - transactional and non-transactional communications, delivery reliability, and preference management.
Production reliability experience: observability tooling, on-call ownership, runbook authorship, and incident response for foundational platform services.
Expert proficiency in SQL and experience with relational database architectures (PostgreSQL); comfort with complex data models involving account hierarchies, usage records, and entitlement state.
Perks of Horizon3
Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

agilepythongotypescriptjavaawsazuregcpdockerkubernetessql

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

Parental Leave