Engineering Manager, Web Application Discovery

Essential Functions

• Lead and grow a team of engineers specializing in web application discovery, crawling, and attack surface enumeration.
• Set technical direction, methodology standards, and quality expectations for the team's deliverables.
• Mentor engineers and raise the bar for coverage completeness, framework breadth, and the reliability of what the team ships.
• Drive hiring and organizational scaling as the engineering team expands.
• Actively manage performance across the team, recognizing high performers, addressing underperformance early, and creating opportunities for growth.

Competencies / Requirements

• Leadership: 3–5+ years leading engineering, security, or offensive security teams; experience managing teams of 4–8+ engineers; proven ability to balance hands-on technical depth with strategic and people responsibilities; strong coaching instincts; ability to assess talent, set growth goals, and develop engineers across experience levels; experience managing performance — both high performers and underperformers — with clarity and accountability.
• Web Application Security Knowledge: Solid understanding of modern web applications, including routing, authentication flows, session management, APIs, and frameworks; familiarity with web crawling, spidering, and content discovery techniques; ability to evaluate completeness of a discovery pass and articulate findings clearly.
• Technical & Engineering Fluency: Experience in Python or similar languages; familiarity with CI/CD workflows, ticketing systems, and full product development life cycles; sufficient technical depth to evaluate team output, identify gaps, and partner on technical direction.
• Product + Customer Orientation: Experience translating technical gaps into product roadmap input and prioritized engineering work; ability to prioritize and make strategic tradeoffs; strong written and verbal communication skills across technical and non-technical audiences; customer-first mindset with a focus on completeness, reliability, and clear output.

Desired Skills

• Hands-on experience with web crawling or scraping tools, browser automation, or similar content discovery tooling.
• Familiarity with web application pentesting, understanding how discovery feeds into testing, and what testers need from a discovery pass.
• Familiarity with relational and graph databases, particularly Postgres and Neo4j.
• Certifications such as OSCP, OSWE, or comparable offensive security credentials.