Senior Offensive Security Engineer, Vulnerability Operations

NVIDIA is a technology company with a Product Security organization focused on advancing AI-driven offensive security. The Senior Offensive Security Engineer will build and improve autonomous and semi-autonomous red team agents, exploit-verification systems, and safety controls while partnering with human red teams and mentoring engineers.

Responsibilities:

• Crafting and building new red team agents: autonomous and semi-autonomous LLM agents that perform reconnaissance, hypothesis-driven exploitation, and evidence capture against NVIDIA -owned targets
• Extending our existing agent harnesses (multi-phase orchestration, parallel specialist subagents, judge/verifier stages, out-of-band callback infrastructure) across multiple agent runtimes and model providers
• Encoding real operator tradecraft into prompts, tools, and playbooks web app exploitation, auth bypass, SSRF/deserialization chains, cloud and Kubernetes attack paths so agents find what a skilled human would
• Building the verification layer: exploit-confirmation harnesses that prove findings are real before a human ever sees them, driving false-positive rates down
• Engineering the safety side of autonomy: sandboxing, scope enforcement, tool allowlists/blocklists, credential isolation, and prompt-injection defenses for agents operating with offensive capability
• Evaluating and benchmarking frontier models for offensive tasks; partnering with our human red team to turn their engagements into repeatable agent capabilities
• Mentoring engineers on the team and setting the technical bar for agentic offensive tooling