Senior Offensive Security Engineer — AI Product Security

Hp Iq; San Francisco (CA); On-site; USD 150,000 - 240,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Disability insurance

Employee assistance program

Flexible spending account

Life insurance

Paid parental leave

Holidays

Job summary

HP IQ is seeking an Offensive Security Engineer to partner with product teams and identify, validate, and mitigate security risks across the product lifecycle. You will influence design decisions, embed security into development workflows, and continuously assess attack surfaces to guide secure development.

Responsibilities include leading penetration tests, conducting security engagements, advising on remediation, and shaping security roadmaps.

Qualifications

• 5+ years as an offensive security engineer or equivalent.
• Experience threat modeling (e.g., STRIDE) and mapping adversary techniques (MITRE ATT&CK).
• Expertise identifying and exploiting OWASP Top 10 and related risks.
• Hands-on testing of embedded systems, firmware, and device software, incl. bootloader security and OS hardening.

Responsibilities

• Lead penetration tests and security assessments for product releases.
• Conduct continuous security engagements, identify vulnerabilities, drive remediation to closure.
• Advise engineering on remediation strategy and verify fixes.
• Assess attack surfaces across internet-facing services, APIs, and device interfaces.
• Perform threat modeling and security architecture reviews shaping product decisions.
• Define end-to-end risk reduction initiatives with stakeholders.
• Shape the offensive security roadmap, tooling, and methodology standards.

Skills

Threat modeling

Vulnerability assessment

Secure development

Security communication

Go

Python

Java

TypeScript

Tools

ChipWhisperer

OpenOCD

Ghidra

Binwalk

JTAG

Job description

HP IQ is seeking an Offensive Security Engineer to partner with product teams and identify, validate, and mitigate security risks across the product lifecycle. You will influence design decisions, embed security into development workflows, and continuously assess attack surfaces to guide secure development.

Responsibilities include leading penetration tests, conducting security engagements, advising on remediation, and shaping security roadmaps.