Senior Offensive Security Engineer, Vulnerability Operations

NVIDIA Corporation; Central City (CO); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

NVIDIA Corporation seeks a Senior Offensive Security Engineer to push AI-driven offensive security. Lead red team agent development, including autonomous LLM agents for reconnaissance, exploitation, and evidence capture across NVIDIA-targeted systems.

Responsibilities include building verification harnesses to prove findings, encoding operator tradecraft into prompts and tools, and mastering web app, cloud/Kubernetes, and systems exploitation techniques.

Qualifications

• Bachelor's degree or equivalent experience.
• ~12+ years in security engineering with at least 4 years in offensive security.
• Deep hands-on exploitation skill in web apps, cloud/Kubernetes, or systems/binary.
• Strong software engineering ability in Python; production code delivery.

Responsibilities

• Crafting and building new red team agents: autonomous/semi-autonomous LLM agents for reconnaissance, exploitation, and evidence capture against NVIDIA targets.
• Develop verification layer: exploit-confirmation harnesses to prove findings before human review, reducing false positives.
• Encode operator tradecraft into prompts, tools and playbooks for web app exploitation, auth bypass, SSRF/deserialization chains, cloud/Kubernetes paths.

Skills

Security engineering

Penetration testing

Red teaming

Python

LLM agent frameworks

Exploit development

Ethical testing

Education

Bachelor's degree or equivalent experience

Tools

Kubernetes

OpenShift

GitOps

Job description

Senior Offensive Security Engineer

NVIDIA's Product Security organization is looking for a Senior Offensive Security Engineer to push the frontier of AI-driven offensive security. We already run language model agents that audit source code and attack live web applications at fleet scale. Your job is to make these agents meaningfully better attackers: new attack capabilities, new target classes, higher true-positive rates, and safer autonomy.

Crafting and building new red team agents: autonomous and semi-autonomous LLM agents that perform reconnaissance, hypothesis-driven exploitation, and evidence capture against NVIDIA-owned targets. Encoding real operator tradecraft into prompts, tools, and playbooks — web app exploitation, auth bypass, SSRF/deserialization chains, cloud and Kubernetes attack paths — so agents find what a skilled human would. Building the verification layer: exploit-confirmation harnesses that prove findings are real before a human ever sees them, driving false-positive rates down.

• Bachelor's degree or equivalent experience
• ~12+ years in security engineering, with at least 4 years in offensive security: penetration testing, red teaming, exploit development, or vulnerability research
• ~ Deep, hands-on exploitation skill in at least one domain (web application, cloud/Kubernetes, or systems/binary) — you can build and prove an exploit chain, not just run a scanner
• ~ Strong software engineering ability in Python; you ship production code, not just PoCs
• ~ Practical experience building with LLMs: agent frameworks, tool use/function calling, multi-agent orchestration, or coding agents (Claude Code, Codex CLI, or similar)
• ~ Respectful, responsible approach to offensive testing — we break things carefully and fix them fast

• Experience with SAST/DAST internals, fuzzing, or program analysis
• Experience red-teaming AI systems themselves (prompt injection, jailbreaks, model evaluation) or contributing to AI-security research
• Familiarity with Kubernetes/OpenShift, GitOps, and operating worker fleets at scale

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until October 18, 2026. NVIDIA uses AI tools in its recruiting processes.

As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.