Research Staff, Adversarial Intelligence

Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs.

We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.

We're looking for a Research Staff Member to join Horizon3 AI Research and work on research problems at the intersection of super intelligence, systems security, and agentic systems for security.

You'll investigate technical problems that arise from real security environments and help turn promising research ideas into methods, prototypes, experiments, and systems that can influence Horizon3's technology. Depending on the project, this may include AI agents for security, autonomous pentesting, attack-path reasoning, cyber deception, AI safety and security, security evaluation of AI systems, or new methods for reasoning over security data and environments.

This is not a purely academic research role and it is not a conventional software engineering role. We are looking for people who enjoy both understanding difficult technical problems and building systems that allow us to test those ideas in practice.

You do not need to arrive as an expert in both AI and systems security. You should have strong computer science foundations and meaningful depth in at least one of these areas, along with the curiosity and motivation to develop expertise in the other.

This role may be hired at the P1 (Entry) or P2 (Developing) level based on experience and demonstrated technical maturity. We expect junior researchers to receive mentorship and technical guidance as they develop greater independence.

• →

  Conduct research on problems at the intersection of AI, cybersecurity, and computer systems.

• →

  Formulate research questions from real technical challenges faced by Horizon3 and its customers.

• →

  Design and run experiments that test research hypotheses in controlled and representative environments.

• →

  Build research prototypes and implement methods with sufficient quality to support meaningful evaluation.

• →

  Study and evaluate modern AI techniques, including large language models, agentic systems, reasoning methods, learning algorithms, and related approaches when relevant to the research problem.

• →

  Analyze security systems, attack paths, telemetry, graphs, configurations, and other real-world security data.

• →

  Read and critically evaluate academic and technical literature, identify relevant ideas, and determine how they apply to Horizon3's research problems.

• →

  Work closely with researchers, attack engineers, security engineers, product teams, and other technical groups to understand problems and evaluate potential solutions.

• →

  Document research methods, experiments, results, and limitations clearly and rigorously.

• →

  Communicate research findings through internal presentations, technical reports, prototypes, and, when appropriate, academic publications or external research outputs.

• →

  Develop greater research independence over time, including the ability to identify promising questions, propose technical approaches, and drive portions of a research project.

• Strong foundations in computer science, including the ability to reason about algorithms, systems, software, and data.

• Technical depth in systems security, super intelligence / machine learning, or a closely related area, along with a strong interest in developing expertise across both AI and security.

• Strong programming skills and the ability to translate technical ideas into working implementations. Python experience is particularly useful, but we care more about strong programming fundamentals than a specific language.

• Ability to design careful experiments, analyze results, and distinguish evidence from intuition.

• Curiosity and willingness to investigate unfamiliar technical areas in depth.

• Interest in both research and engineering. You may be stronger in one than the other, but you should be comfortable moving between technical ideas, experiments, prototypes, and implementation.

• Ability to receive technical feedback, revise your approach, and learn from other researchers and engineers.

• Good technical judgment. We value ambitious exploration, but also careful reasoning about assumptions, limitations, risks, and unintended consequences.

• Strong written and verbal communication skills.

• A degree in Computer Science or a related field, or equivalent technical experience.

• Experience in systems security, offensive security, defensive security, penetration testing, vulnerability research, operating systems, networks, distributed systems, cloud security, or related areas.

• Experience with machine learning, deep learning, large language models, AI agents, reinforcement learning, planning, search, graph-based reasoning, or related AI methods.

• Experience conducting research through an academic research group, thesis, independent research project, internship, industrial research project, or comparable technical work.

• Experience designing experimental infrastructure, benchmarks, test environments, or evaluation frameworks.

• Experience building systems that operate on real-world data, environments, or security infrastructure rather than only clean benchmark datasets.

• Familiarity with security concepts such as attack paths, Active Directory, cloud environments, identity systems, network security, security controls, or adversarial techniques.

• Strong research publications, conference presentations, open-source contributions, or other evidence of high-quality technical work. Publications are valuable but are not required for this role.

• Experience working across research and engineering teams or contributing research ideas to practical systems.

We are a fully remote company, and this job may require up to 5% of travel to be successful.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.