Security Engineer, Offensive Security

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We're hiring Cyber Evaluations Engineers to build and run the evaluations that measure cyber-relevant capabilities and safeguard robustness in our models. You'll design new evals, run per-release robustness testing, and dig into data on jailbreaks and prompt bypasses to understand where our safeguards hold up and where they don't. You'll also design many of the probes that detect cyber abuse in production and help shape the overall detection architecture alongside the policy team. Key responsibilities Design and run capability, uplift, and safety evaluations to assess cyber-relevant risk in new models Execute per-release safeguard-robustness testing ahead of major model launches Analyze evaluation results and communicate findings clearly to the team and to stakeholders Design, prototype, and tune detection probes for cyber misuse Work with the cyber policy team to turn policy lines into a layered, robust abuse-detection architecture, and measure its precision and coverage over time Build and maintain internal tooling used to run and score evaluations Collaborate with policy and engineering partners to translate eval findings into safeguard improvements Minimum qualifications Experience building or running evaluations, benchmarks, or test suites for software or ML systems, including delivering results on short, fixed timelines Hands-on cybersecurity experience (e.g., CTF participation, vulnerability research, exploit development, or security research) Proficiency in Python Strong ability to communicate evaluation results with multiple cross-functional stakeholders or potential policy stakeholders Preferred qualific

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic is bringing Claude to the U.S. government and allied democracies, and we’re looking for startup-minded engineers to grow our public sector engineering team. This is a small team with large surface area. You’ll work across the stack to take products from 0 to 1 and beyond. We are looking for product- and civic-minded engineers with a track record of building and scaling great products. The opportunities outpace our ability to build them all, so the right candidate thrives on sharp judgment, prioritization, and focus. You’ll own work like: Building Claude products that can be used by customers in highly regulated environments Deploying Claude into government networks Understanding and improving Claude’s usefulness in common government workflows – for example, policy research, benefits administration, intelligence analysis Scaling and innovating Claude for Government, our existing product serving U.S. government customers today Our team is filling a number of roles and is open to candidates with either full-stack or backend experience. Key responsibilities Architect and ship deployments that meet public sector compliance and security requirements, from FedRAMP to classified networks Build AI applications tailored to government workflows by developing deep understanding of how agencies actually operate Partner with research and safeguards teams to evaluate and improve Claude for government use cases Work directly with government customers and internal go-to-market teams to turn requirements into technical and product roadmaps Design scalable systems for deployment, user management, and administrative control

Here at Datadog, we think about offensive security a little bit differently. We embrace automation and AI to run adversary simulations continuously across a massive cloud-native environment, and we expect our offensive engineers to build the tooling that makes that possible. We're looking for a Senior Security Engineer who can execute sophisticated red team operations, write the code that scales them, and take an AI-first approach to offensive security engineering. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You'll Do: Plan and execute red team engagements end-to-end, simulating real-world threat actors across cloud infrastructure (AWS, GCP), Kubernetes, CI/CD pipelines, and corporate environments Build and maintain custom offensive tooling, automation frameworks, and engagement infrastructure, treating offensive operations as a software engineering problem Develop custom payloads and evasion capabilities tailored to Datadog's environment and modern defensive controls (EDR, SIEM, network monitoring) Improve the efficiency of offensive operations through thoughtful use of automation and AI, accelerating reconnaissance, vulnerability analysis, and reporting workflows Partner with the Detection & Response team on purple team exercises to validate detection logic, improve alert fidelity, and influence threat models Translate offensive findings into concrete improvements by working directly with defensive security and engineering teams to close gaps Who You Are: You have 5+ years of hands-on experience in offensive security (red teaming, penetration testing, or adversary simulation) with a track record of operating against mature, well-defended environments You write production-quality code (Python, Go, or similar), can build your own tools, and automate your w

Who We Are HP IQ is HP’s new AI innovation lab. Combining startup agility with HP’s global scale, we’re building intelligent technologies that redefine how the world works, creates, and collaborates. We’re assembling a diverse, world-class team—engineers, designers, researchers, and product minds—focused on creating an intelligent ecosystem across HP’s portfolio. Together, we’re developing intuitive, adaptive solutions that spark creativity, boost productivity, and make collaboration seamless. We create breakthrough solutions that make complex tasks feel effortless, teamwork more natural, and ideas more impactful—always with a human-centric mindset. By embedding AI advancements into every HP product and service, we’re expanding what’s possible for individuals, organisations, and the future of work. Join us as we reinvent work, so people everywhere can do their best work. About The Role As an Offensive Security Engineer within HP IQ’s Product Security team, you will partner closely with engineering teams to identify, validate, and mitigate security risks across the product lifecycle. You’ll influence design decisions, embed security into development workflows, and continuously assess attack surfaces to guide and enhance secure development. What You Might Do Lead penetration tests and security assessments for product and feature releases. Conduct continuous security engagements, proactively identifying vulnerabilities and driving remediation to closure. Advise engineering and product teams on remediation strategy, validating fixes and tracking measurable improvements to security posture over time.​​​​​​​​​​​​​​​​ Assess attack surfaces across internet-facing services, APIs, and device interfaces (Wi-Fi, BLE, USB). Perform threat modeling and security architecture reviews that directly shape product decisions. Define and lead end-to-end risk reduction initiatives with internal and external stakeholders, aligning offensive findings to strategic security investments.​​​​

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role Palantir's Offensive Security team probes our own products, infrastructure, and cloud environment the way a real attacker would. As an Offensive Security Engineer, you will test internal applications and infrastructure, chain findings into realistic attack paths, and work directly with the engineers responsible for the affected systems to get issues closed. A growing part of the team’s work is also developing agentic offensive security tooling: LLM-driven systems that encode operator tradecraft and apply it continuously. You will help in the design of that tooling and prove it out on live assessments. You will also help to coordinate third-party penetration testing engagements, scoping the work with specialized external firms, keeping assessments focused on the risks that matter, and turning their results into concrete remediation. Core Responsibilities Conduct hybrid web application penetration tests that combine source code review with runtime exploitation across our products and internal tooling. Perform external network penetration tests against internet-facing infrastructure, identifying exposed services, misconfigurations, and paths to obtain an initial foothold. Perform internal network and Active Directory security assessments, identifying privilege escalation paths, lateral movement opportunities, and misconfigurations. Assess the security of cloud and containerized infrastructure, including identity, network, and workload configurations. Collaborate with detection engineering to validate telemetry and detection coverage against real-world attack techniques uncovered during engagements. Scope and

NVIDIA's Automotive Offensive Security team believes the best defense is a good offense. Securing a sophisticated automotive operating system means finding vulnerabilities then building the tooling needed to find them at scale. We're looking for a senior engineer who can break low-level systems and then automate the insights gained from doing so into reusable security capabilities. What you'll be doing: You'll discover and evaluate vulnerabilities on both source code and binaries, focusing on low-level technologies such as OS kernels, Hypervisor, boot ROMs, firmware, and hardware. More than just bug finding, you'll develop and build automation to scale your work. This includes security pipelines, fuzzing infrastructure, AI-assisted vulnerability discovery, tools for automated code inspection, and code conversion. You'll work closely with security researchers and engineers, owning tool development - from prototype to production - for use across the software organization What we need to see : 7+ years of hands on programming experience, particularly with C/C++. Python and memory safe language (e.g. Rust, Ada/SPARK) proficiency a plus. B.S. or equivalent experience in Computer Science or a related field. Strong low-level systems security background: OS internals, kernels, hypervisors, firmware, or hardware; applying an analytical approach dissecting the functionality of intricate software and identifying security flaws. Experience with embe