Product & Privacy Counsel

Get to Know Us

Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. Node Zero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises.

It is used by ITOps/Sec Ops teams, consulting pentesters, and MSSPs and MSPs.

We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, “checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.

We’re looking for a practical, business-minded Product & Privacy Counsel to join our Legal team and serve as a key legal partner across Horizon
3.

This role will have a balanced focus across product counseling and privacy, with meaningful ownership in both areas. You will partner closely with Product and Engineering throughout the product lifecycle, advising on new products, features, technologies, and regulatory requirements, while also helping operate and scale Horizon3’s global privacy program.

You will work cross-functionally with Product, Engineering, Security, Compliance, GTM, and Operations to translate complex legal and regulatory requirements into practical, scalable solutions that protect the business without creating unnecessary friction.

This role is ideal for an attorney who enjoys working directly with technical and business teams, can independently own matters, and is comfortable making practical, risk-based recommendations in a fast-moving cybersecurity environment.

• Serve as a day-to-day legal partner to Product and Engineering on new products, features, integrations, and product changes.
• Provide legal guidance throughout the product lifecycle, from early design and development through launch and ongoing operation.
• Identify and advise on legal and regulatory considerations involving product functionality, data use, telemetry, logging, APIs, integrations, and emerging technologies.
• Conduct legal reviews of new products and features and develop practical approaches to mitigate identified risks.
• Advise on product terms, disclosures, customer-facing documentation, and other legal requirements associated with product launches.
• Partner with Product, Engineering, Security, and Compliance to translate legal requirements into practical and scalable product controls.
• Advise on the development, deployment, and use of AI and other emerging technologies, including applicable AI and technology regulation.
• Develop scalable playbooks, guidance, and processes that help teams identify and address legal requirements earlier in the product development lifecycle.

• Help operate and scale Horizon3's global privacy program.
• Advise on global privacy and data protection requirements, including GDPR, UK GDPR, CCPA/CPRA, U.S. state privacy laws, and other emerging privacy regulations.
• Embed privacy-by-design principles into products, systems, and business processes, including conducting and maintaining PIAs, DPIAs, and related assessments.
• Advise on controller, processor,…