225K–265K USD / year

Staff Software Engineer, Firewall

BackendRemote — United States
Published on 2026-10-30
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.

About this role

Lead the technical direction and hands-on development of Horizon3’s Web Application Firewall workstream within Precision Defense. Build integrations that assess WAF coverage and turn validated attack-path findings into accurate, safe remediation guidance.

About the company

Horizon3.ai is a technology company specializing in cybersecurity solutions, focusing on automated penetration testing and threat detection for enterprises. They provide a range of services aimed at enhancing security posture and risk management for organizations across various sectors.

The team

Precision Defense, Firewall pod

Stack

PythonGoRustAWS WAFCloudflareF5ImpervaFortiWeb

What you'll do

  • Own the WAF workstream’s technical approach from design through delivery and operation.
  • Build reliable integrations with WAF platforms and account for vendor-specific policy behavior.
  • Develop correctness checks and safe remediation guidance that preserve legitimate traffic.
  • Design durable workflows with retries, idempotency, timeouts, and partial-failure handling.
  • Add authorization, audit, validation, rollout, and recovery controls for configuration changes.
  • Improve observability and contribute production code, reviews, architecture, and mentorship.

What we're looking for

  • Expert-level proficiency in large-scale Python development.
  • 8+ years leading technical work at Staff, Lead, or comparable scope.
  • Working knowledge of WAF platforms, rules, managed rule groups, and request inspection behavior.
  • Proficiency in Go, Rust, or a comparable backend language.
  • Experience designing service-oriented systems, APIs, or integrations for reliability and partial failure.
  • Strong systems-design, security, communication, and cross-functional leadership skills.

Nice to have

  • Experience with API security, bot management, rate limiting, application security testing, or network firewalls.
  • Experience integrating vendor-specific security or infrastructure platforms.
  • Experience building security products that assess control coverage or validate attack paths.
  • Experience with safe automation, cloud environments, containerization, or services at scale.
  • Experience partnering with Product, applied research, or security practitioners.

Benefits

  • Stock options
  • Health, vision, and dental insurance for employees and family
  • Flexible vacation policy
  • Generous parental leave
View original job post