Senior Offensive Security Engineer, Vulnerability Operations

NVIDIA Corporation; Yorktown (VA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity compensation

Benefits package

Job summary

NVIDIA Corporation in Virginia's Product Security organization seeks a Senior Offensive Security Engineer to push the frontier of AI-driven offensive security. You will craft autonomous red team agents, perform reconnaissance, hypothesis-driven exploitation, and evidence capture against NVIDIA-owned targets.

We expect 12+ years in security engineering with at least 4 years in offensive security, strong Python production code, and hands-on Exploit development across web, cloud/Kubernetes, or

Qualifications

• 12+ years in security engineering, with at least 4 years in offensive security.
• Hands-on exploitation in web, cloud/Kubernetes, or systems/binary.
• Strong Python software engineering; production code.
• Experience building with LLMs: agent frameworks and multi-agent orchestration.
• Ethical and responsible approach to offensive testing.

Responsibilities

• Develop autonomous and semi-autonomous LLM agents for reconnaissance and exploitation.
• Craft new attack capabilities and target classes for AI-driven security.
• Build verification harnesses to reduce false positives.
• Operate on NVIDIA-owned targets with safe autonomy.
• Contribute to AI security research.

Skills

Security engineering

Offensive security

Python

LLM-based tooling

Red teaming

Education

Bachelor's degree

Tools

Kubernetes

OpenShift

GitOps

Job description

NVIDIA's Product Security organization is looking for a Senior Offensive Security Engineer to push the frontier of AI-driven offensive security. We already run language model agents that audit source code and attack live web applications at fleet scale. Your job is to make these agents meaningfully better attackers: new attack capabilities, new target classes, higher true-positive rates, and safer autonomy. Crafting and building new red team agents: autonomous and semi-autonomous LLM agents that perform reconnaissance, hypothesis-driven exploitation, and evidence capture against NVIDIA-owned targets

Encoding real operator tradecraft into prompts, tools, and playbooks — web app exploitation, auth bypass, SSRF/deserialization chains, cloud and Kubernetes attack paths — so agents find what a skilled human would

Building the verification layer: exploit-confirmation harnesses that prove findings are real before a human ever sees them, driving false-positive rates down

Bachelor's degree or equivalent experience

• ~12+ years in security engineering, with at least 4 years in offensive security: penetration testing, red teaming, exploit development, or vulnerability research
• ~ Deep, hands-on exploitation skill in at least one domain (web application, cloud/Kubernetes, or systems/binary) — you can build and prove an exploit chain, not just run a scanner
• ~ Strong software engineering ability in Python; you ship production code, not just PoCs
• ~ Practical experience building with LLMs: agent frameworks, tool use/function calling, multi-agent orchestration, or coding agents (Claude Code, Codex CLI, or similar)
• ~ Respectful, responsible approach to offensive testing — we break things carefully and fix them fast

Experience with SAST/DAST internals, fuzzing, or program analysis

Experience red-teaming AI systems themselves (prompt injection, jailbreaks, model evaluation) or contributing to AI-security research

Familiarity with Kubernetes/OpenShift, GitOps, and operating worker fleets at scale

If you're a creative and autonomous engineer with a real passion for technology, we want to hear from you!

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until October 18, 2026. NVIDIA uses AI tools in its recruiting processes.

As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.