Senior Offensive Security Engineer, AI Security Lab

HP; San Francisco (CA); On-site; USD 150,000 - 240,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Disability insurance

Employee assistance program

Flexible spending account

Life insurance

Parental leave (4-12 weeks)

Holidays (11)

Flexible vacation

Job summary

HP IQ, HP’s AI innovation lab, seeks an experienced Offensive Security Engineer to partner with engineering teams across the product lifecycle. You will lead penetration tests, drive remediation, and shape threat modeling and security architecture reviews to guide secure development.

You’ll work on protecting internet-facing services, APIs, and device interfaces, with a focus on embedded firmware, bootloader security, and hardware-assisted techniques.

Qualifications

• 5+ years of experience in offensive security engineering or equivalent.
• Experience with threat modeling (e.g., STRIDE) and mapping adversary techniques (e.g., MITRE ATT&CK).
• Expertise in identifying and exploiting common vulnerabilities (e.g., OWASP Top 10, SANS 25).
• Hands-on testing of embedded systems, firmware, and device software, including bootloader security and OS hardening.
• Demonstrated experience with hardware-assisted attack techniques using tools like ChipWhisperer, OpenOCD, Ghidra, Binwalk.
• Proficiency in at least one modern language (Go, Python, Java, or TypeScript) for tooling/automation.
• Ability to communicate findings and strategic recommendations to engineers and executives.

Responsibilities

• Lead penetration tests and security assessments for product releases.
• Conduct continuous security engagements to identify vulnerabilities and drive remediation.
• Advise engineering teams on remediation strategy and validate fixes.
• Assess attack surfaces across internet-facing services, APIs, and device interfaces.
• Perform threat modeling and security architecture reviews shaping product decisions.
• Define and lead end-to-end risk reduction initiatives with internal and external stakeholders.
• Shape the offensive security roadmap, including scope, tooling, and methodology standards.

Skills

Threat modeling

Vulnerability assessment

Embedded systems testing

Hardware-assisted attacks

Go/Python/Java/TypeScript

Security communication

Penetration testing

Tools

ChipWhisperer

OpenOCD

Ghidra

Binwalk

Job description

HP IQ, HP’s AI innovation lab, seeks an experienced Offensive Security Engineer to partner with engineering teams across the product lifecycle. You will lead penetration tests, drive remediation, and shape threat modeling and security architecture reviews to guide secure development.

You’ll work on protecting internet-facing services, APIs, and device interfaces, with a focus on embedded firmware, bootloader security, and hardware-assisted techniques.