Senior Offensive Security Engineer, Vulnerability Operations

NVIDIA Corporation; Virginia; On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

NVIDIA Corporation seeks a Senior Offensive Security Engineer to push AI-driven offensive security. Join our Product Security team to develop autonomous red-team agents, perform reconnaissance, exploitation, and evidence capture against NVIDIA-owned targets at fleet scale.

The role involves encoding operator tradecraft into prompts and tools, building verification harnesses to reduce false positives, and delivering production-grade security capabilities powered by LLMs.

Qualifications

• Bachelor's degree or equivalent experience.
• 12+ years in security engineering, with at least 4 years in offensive security.
• Strong Python production code experience.

Responsibilities

• Develop autonomous red-team agents and semi-autonomous LLM agents for reconnaissance, exploitation, and evidence capture against NVIDIA-owned targets.
• Encode operator tradecraft into prompts, tools, and playbooks for web app exploitation, auth bypass, SSRF/deserialization, and cloud/Kubernetes paths.
• Build verification harnesses to prove findings before human review and reduce false positives.
• Work at fleet scale on AI-driven offensive security and contribute to tooling and frameworks.

Skills

Python

Offensive security

Red team tooling

LLM/AI-assisted security

Education

Bachelor's degree or equivalent experience

Job description

Senior Offensive Security Engineer

NVIDIA's Product Security organization is looking for a Senior Offensive Security Engineer to push the frontier of AI-driven offensive security. We already run language model agents that audit source code and attack live web applications at fleet scale. Your job is to make these agents meaningfully better attackers: new attack capabilities, new target classes, higher true-positive rates, and safer autonomy.

Crafting and building new red team agents: autonomous and semi-autonomous LLM agents that perform reconnaissance, hypothesis-driven exploitation, and evidence capture against NVIDIA-owned targets. Encoding real operator tradecraft into prompts, tools, and playbooks — web app exploitation, auth bypass, SSRF/deserialization chains, cloud and Kubernetes attack paths — so agents find what a skilled human would. Building the verification layer: exploit-confirmation harnesses that prove findings are real before a human ever sees them, driving false-positive rates down.

• Bachelor's degree or equivalent experience
• ~12+ years in security engineering, with at least 4 years in offensive security: penetration testing, red teaming, exploit development, or vulnerability research
• ~ Deep, hands-on exploitation skill in at least one domain (web application, cloud/Kubernetes, or systems/binary) — you can build and prove an exploit chain, not just run a scanner
• ~ Strong software engineering ability in Python; you ship production code, not just PoCs
• ~ Practical experience building with LLMs: agent frameworks, tool use/function calling, multi-agent orchestration, or coding agents (Claude Code, Codex CLI, or similar)
• ~ Respectful, responsible approach to offensive testing — we break things carefully and fix them fast

• Experience with SAST/DAST internals, fuzzing, or program analysis
• Experience red-teaming AI systems themselves (prompt injection, jailbreaks, model evaluation) or contributing to AI-security research
• Familiarity with Kubernetes/OpenShift, GitOps, and operating worker fleets at scale

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until October 18, 2026. NVIDIA uses AI tools in its recruiting processes.

As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.