Senior Offensive Security Engineer, Vulnerability Operations

NVIDIA Corporation; Colorado; On-site; USD 200,000 - 320,000; Full time

Benefits offered by this job

Equity

Job summary

NVIDIA's Product Security organization is seeking a Senior Offensive Security Engineer to push the frontier of AI-powered red team work. You will craft autonomous LLM-driven agents that audit and attack NVIDIA-owned targets at fleet scale, developing new exploitation techniques and safer automation.

You will build exploitation chains, integrate prompt-based operator tradecraft, and create verification harnesses to prove findings before humans review.

Qualifications

• Bachelor's degree or equivalent experience.
• ~12+ years in security engineering, with at least 4 years in offensive security.
• ~ Deep, hands-on exploitation skill in at least one domain (web app, cloud/Kubernetes, or systems/binary).
• ~ Strong software engineering ability in Python; you ship production code, not just PoCs.
• ~ Practical experience building with LLMs: agent frameworks, tool use/function calling, multi-agent orchestration, or coding agents.
• ~ Respectful, responsible approach to offensive testing — we break things carefully and fix them fast.

Responsibilities

• Craft autonomous red team agents and playbooks for auditing and attacking NVIDIA-owned targets.
• Encode operator tradecraft into prompts and tools for web app, cloud, and systems exploitation.
• Develop verification harnesses to prove findings before human review and reduce false positives.
• Operate at fleet scale and continuously improve attack capabilities and safety.

Skills

Python

Offensive security

Red team / pentesting

LLM agent frameworks

Cloud/Kubernetes

Vulnerability research

Exploitation

Education

Bachelor's degree or equivalent experience

Tools

Claude Code

Codex CLI

Kubernetes

OpenShift

GitOps

Job description

Senior Offensive Security Engineer

NVIDIA's Product Security organization is looking for a Senior Offensive Security Engineer to push the frontier of AI-driven offensive security. We already run language model agents that audit source code and attack live web applications at fleet scale. Your job is to make these agents meaningfully better attackers: new attack capabilities, new target classes, higher true-positive rates, and safer autonomy.

Crafting and building new red team agents: autonomous and semi-autonomous LLM agents that perform reconnaissance, hypothesis-driven exploitation, and evidence capture against NVIDIA-owned targets. Encoding real operator tradecraft into prompts, tools, and playbooks — web app exploitation, auth bypass, SSRF/deserialization chains, cloud and Kubernetes attack paths — so agents find what a skilled human would. Building the verification layer: exploit-confirmation harnesses that prove findings are real before a human ever sees them, driving false-positive rates down.

• Bachelor's degree or equivalent experience
• ~12+ years in security engineering, with at least 4 years in offensive security: penetration testing, red teaming, exploit development, or vulnerability research
• ~ Deep, hands-on exploitation skill in at least one domain (web application, cloud/Kubernetes, or systems/binary) — you can build and prove an exploit chain, not just run a scanner
• ~ Strong software engineering ability in Python; you ship production code, not just PoCs
• ~ Practical experience building with LLMs: agent frameworks, tool use/function calling, multi-agent orchestration, or coding agents (Claude Code, Codex CLI, or similar)
• ~ Respectful, responsible approach to offensive testing — we break things carefully and fix them fast

• Experience with SAST/DAST internals, fuzzing, or program analysis
• Experience red-teaming AI systems themselves (prompt injection, jailbreaks, model evaluation) or contributing to AI-security research
• Familiarity with Kubernetes/OpenShift, GitOps, and operating worker fleets at scale

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until October 18, 2026. NVIDIA uses AI tools in its recruiting processes.

As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.