Senior Offensive Security Engineer

HP IQ • San Francisco, CA

8h

About The Position

As an Offensive Security Engineer within HP IQ’s Product Security team, you will partner closely with engineering teams to identify, validate, and mitigate security risks across the product lifecycle. You’ll influence design decisions, embed security into development workflows, and continuously assess attack surfaces to guide and enhance secure development.

Requirements

• 5+ years of experience as an offensive security engineer or equivalent.
• Deep understanding of security principles and best practices as they relate to production environments.
• Expertise in identifying and exploiting common vulnerabilities (e.g., OWASP Top 10, SANS 25)
• Experience in testing local device hardware and software systems.
• Experience threat modeling (e.g., STRIDE) and mapping adversary techniques (e.g., MITRE ATT&CK).
• Proficiency in at least one modern language (Go, Java, Python, TypeScript).
• Excellent communication skills, with the ability to convey security concepts to technical and non-technical stakeholders.

Nice To Haves

• Experience securing AI products or edge-connected systems at scale.
• Experience operating within a product-focused security team
• Familiarity with securing microservices and cloud-native architectures
• Prior experience validating compliance standards such as SOC 2, ISO 27001, or PCI DSS
• Ability to influence without authority and drive outcomes across distributed teams.

Responsibilities

• Lead penetration tests and security assessments for product and feature releases.
• Run continuous security engagements to proactively identify and drive remediation of vulnerabilities.
• Partner with engineering and product teams to resolve security findings.
• Perform threat modeling and security architecture reviews to guide product development.
• Define and enforce secure-by-design standards for applications, cloud services, and device software.
• Assess attack surfaces across internet-facing services, APIs, and device interfaces (Wi-Fi, BLE, USB).
• Collaborate with internal and external stakeholders to drive end-to-end risk reduction initiatives.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Long term/short term disability insurance
• Employee assistance program
• Flexible spending account
• Life insurance
• Generous time off policies, including;
• 4-12 weeks fully paid parental leave based on tenure
• 11 paid holidays
• Additional flexible paid vacation and sick leave (US benefits overview)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed