HiringCafe
Join our community

29 offensive jobs at 25 companies in San Francisco, CA

3w
Save
Mark Applied
Hide
Senior Offensive Security Engineer
San Mateo, California, United States
$197k-$243k/yr HybridFull Time
Roblox
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years offensive security experience; proficiency in Python or Go; experience with purple team exercises, breach/attack simulation, cloud and API security; strong technical writing and analytical skills.
Python, Go, SOAR, MITRE ATT&CK, PTES, BAS, EDR, SIEM, XDR, AWS, Azure, GCP, CI/CD
Job PostingView all
2w
Save
Mark Applied
Hide
Senior Manager, Offensive Security
Redwood City, California, United States
$185k-$225k/yr RemoteFull Time
Delinea
Delinea: Provides identity security and privileged access management software.
7+ YOE3+ Mgmt7+ years hands-on penetration testing experience, 3+ years leading offensive security teams; expertise in web/API/network testing, AD/Entra ID attacks, source review, and scripting; familiarity with compliance (SOC2, ISO27001, PCI, FedRAMP).
MITRE ATT&CK, OWASP, PTES, Burp Suite, Cobalt Strike, Sliver, BloodHound, Python, Go, PowerShell, Azure, AWS, Kubernetes, CI/CD
Job PostingView all
2mo
Save
Mark Applied
Hide
Principal Offensive Security Engineer
Palo Alto, California, United States
$168k-$271k/yr OnsiteFull Time
Palo Alto Networks
Palo Alto NetworksNASDAQ: PANW: Provides enterprise-grade network, cloud, and endpoint security software.
8+ YOE8+ years in Offensive Security/Red Teaming, cloud expertise (GCP/AWS/Azure), Kubernetes security, IaC/CI–CD security, and led pentests/red team ops.
Kubernetes, Container Security, IaC, CI/CD, Cloud Security
Job PostingView all
2w
Save
Mark Applied
Hide
Senior Principal Engineer, Offensive Security (2026-345)
San Jose, California, United States
$190k-$240k/yr OnsiteFull Time
Astera Labs
Astera LabsNASDAQ: ALAB: Designs connectivity solutions for cloud and AI infrastructure.
12+ YOEBachelor's in CS/CE/EE or related,12+ years offensive security experience,expertise in hardware/firmware/embedded/cloud or AD,proficiency in Python/C/C++/assembly,knowledge of MITRE ATT&CK,track record driving remediation.
Python, C, C++, Assembly, Azure, MITRE ATT&CK, PCIe, CXL, COSMOS
Job PostingView all
6d
Save
Mark Applied
Hide
Senior Offensive Security Engineer, Automotive
Santa Clara, California, United States
$184k-$357k/yr OnsiteFull Time
NVIDIA
NVIDIANASDAQ: NVDA: Designs GPU-accelerated computing and artificial intelligence hardware.
7+ YOE7+ years programming experience with C/C++, low-level systems security and embedded software expertise, automated security tooling experience, Linux knowledge, x86/ARM architecture, and agentic AI systems experience.
C, C++, Python, Rust, Ada/SPARK, TLA+, Lean, Linux, RISC-V
Job PostingView all
3w
Save
Mark Applied
Hide
Offensive Security Agent Engineer
New York City or Seattle or Washington or San Francisco or United States
$347k-$490k/yr RemoteFull Time
OpenAI
OpenAI: Develops artificial intelligence models and generative AI software services.
Staff/principal-level offensive security expertise, domain knowledge in cloud/Kubernetes/web/Linux/macOS, experience building production software and agent systems, strong judgment and communication.
Kubernetes, Linux, macOS
Job PostingView all
2mo
Save
Mark Applied
Hide
Sr. Staff Security Engineer – AI, VMR, Offensive Security
Bethesda or Palo Alto or Dallas or Seattle
$120k-$260k/yr OnsiteFull Time
GEICO
GEICO: Provides vehicle and property insurance services to consumers.
10+ YOE10+ years in security engineering with deep vulnerability management and offensive security experience; hands-on cloud (AWS/Azure/GCP), programming (Python, Go, Java), NIST CSF, compliance (PCI, SOX, NYDFS), and strong leadership and communication skills.
AWS, Azure, GCP, Python, Go, Java, NIST CSF, SIEM, SOAR, CI/CD, CMDB, AI
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Red Team Operator
Minneapolis or Atlanta or Cincinnati or Cupertino or Portland or New York or Chicago or Englewood or Charlotte or Irving
$133k-$157k/yr HybridFull Time
U.S. Bank
U.S. BankNYSE: USB: Provider of personal, business, and institutional financial services.
8+ YOEBachelor's degree or equivalent, 8+ years in information security with offensive security/Red Team experience; expertise in exploit development, offensive tooling, and scripting; strong communication and leadership.
Cobalt Strike, Metasploit, Mythic, Sliver, Python, PowerShell, C/C++, C#, Go, Shell, EDR, XDR, Infrastructure as Code (IaC)
Job PostingView all
3w
Save
Mark Applied
Hide
Class A Driver Home Daily
Oakland or Piedmont
$29/hr FieldFull Time
XLR8 Truck Lines
XLR8 Truck Lines: Intermodal drayage and freight transportation services provider.
2+ YOEValid Class A CDL, 2 years tractor-trailer experience, TWIC, clean driving record, pass medical exam, no recent serious offenses.
Job PostingView all
3mo
Save
Mark Applied
Hide
Platform Security Engineer
San Francisco, California, United States
OnsiteFull Time
Applied Compute
Applied Compute: Developing specialized AI agents for corporate enterprise workflows.
5+ YOE5+ years in platform security with offensive mindset; strong design, threat modeling, and incident response; proven ability to ship secure software at scale.
Cloud, Multi-tenant environments, LLMs
Job PostingView all
3w
Save
Mark Applied
Hide
Security Engineer
San Francisco, California, United States
$200k-$230k/yr OnsiteFull Time
LiteLLM
LiteLLM: Open-source AI gateway for standardizing LLM API access.
Startup security engineering experience with hands-on offensive/white-hat hacking, application and CI/CD security, demonstrated security projects and CTF success.
Python, GitHub, OpenAI, CI/CD
Job PostingView all
2w
Save
Mark Applied
Hide
AI Security Engineer, AI Security Unit
San Francisco, California, United States
RemoteFull Time
Check Point Software Technologies
Check Point Software TechnologiesNASDAQ: CHKP: Provides network, cloud, and mobile cybersecurity solutions.
Offensive security experience, expertise in LLM vulnerabilities and AI attack surfaces, proficiency building automation tooling, strong technical writing and client-facing skills.
OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, Model Context Protocol (MCP)
Job PostingView all
1mo
Save
Mark Applied
Hide
Security Engineer
Berkeley, California, United States
$286k-$503k/yr HybridFull Time
METR
METR: Develops scientific methods to assess frontier AI capabilities and risks.
Deep security fundamentals across systems, networks, cloud, and identity; offensive security/red teaming; AI/LLM engineering; strong AWS (IAM) knowledge.
AWS, EKS, Lambda, ECS, IAM, SQS, CloudWatch, SecurityHub, GuardDuty, PostgreSQL, Aurora, Pulumi, DataDog, Okta, Google Workspace, Tailscale, CrowdStrike Falcon, SIEM, Kubernetes
Job PostingView all
3w
Save
Mark Applied
Hide
CDL-A Company Truck Driver - Home Daily
Fairfield or Suisun City
$28-$31/hr FieldFull Time
IMC Logistics
IMC Logistics: Provider of intermodal container transportation and landside logistics services.
1+ YOEMust have Class A CDL, 1+ year tractor-trailer experience, TWIC card, limited preventable accidents, and no serious offenses; eligible for night or day local routes.
Job PostingView all
3d
Save
Mark Applied
Hide
Managing Principal, Red Team Operator
Palo Alto, California, United States
OnsiteFull Time
Armadin
Armadin: Developing AI-driven autonomous security platforms for enterprise threat remediation.
12+ YOERequires 12+ years of offensive security experience, advanced application and network security expertise, leadership ability, and proficiency with security tools, scripting, cloud, identity, and operating systems.
Burp Suite, OWASP ZAP, Caido, Nmap, Metasploit, Cobalt Strike, Impacket, BloodHound, Responder, CrackMapExec, Frida, Ghidra, IDA Pro, Python, Bash, PowerShell, Windows, Unix/Linux, macOS, AWS, Azure, GCP, Kerberos, SAML, OAuth, iOS, Android
Job PostingView all
1mo
Save
Mark Applied
Hide
Security Engineer
Los Angeles or San Francisco
$145k-$185k/yr OnsiteFull Time
Vast.ai
Vast.ai: Decentralized marketplace for GPU cloud computing resources.
Bachelor's in CS/cybersecurity, strong programming (Python or C), deep Linux and containerization knowledge, offensive and defensive security experience, familiarity with SOC 2/NIST, and security testing tools.
Python, C, Linux, Burp Suite, OWASP, SIEM, WAF, EDR
Job PostingView all
2mo
Save
Mark Applied
Hide
Manager, Red Team, Bots & DDoS Threat Intelligence
United States or Los Angeles County or San Francisco
$175k-$237k/yr RemoteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ Mgmt5+ years managing teams and 5+ years in software/security environments; experience with offensive security, bot mitigation, DDoS simulation, threat modeling, and translating findings to defensive improvements.
Nodriver, Puppeteer, TLS, Canvas, WebGL, WAF, CDN, LLM
Job PostingView all
1w
Save
Mark Applied
Hide
Security Researcher (Detection Systems)
Sunnyvale, California, United States
$150k-$250k/yr OnsiteFull Time
Cylake
Cylake: Developing an AI-native cybersecurity platform for sovereign environments.
5+ YOE5+ years building large-scale threat analysis or detection solutions, or a relevant Ph.D.; expertise in threat hunting, malware, vulnerability analysis, reverse engineering, or offensive security; strong Python proficiency.
Python, C, C++, Rust, Go, MITRE ATT&CK, EDR, XDR, SOC, IDS, IPS, LLMs
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Privacy Engineer (RED team) - TikTok PDPO
San Jose, California, United States
$213k-$388k/yr OnsiteFull Time
TikTok
TikTok: Global short-form video hosting and social media platform.
Hands-on offensive security/red teaming experience, strong appsec and privacy engineering knowledge, ability to threat-model privacy concepts and lead end-to-end technical assessments, strong communication skills.
MITRE ATT&CK
Job PostingView all
1w
Save
Mark Applied
Hide
Senior IT Penetration Tester
United States or Oak Brook or Los Angeles or Washington or Troy or New York City or Houston or Chicago or Grand Rapids or Owings Mills or Columbia or Richmond or Memphis or Raleigh or Boston or San Jose or San Francisco or Austin or Kalamazoo or Spokane or Denver or Fort Worth or Atlanta or Orlando or Dallas or Wilmington or Phoenix or San Antonio or Milwaukee or Madison or McLean or Melville or Woodbridge or Stamford or Philadelphia or Charlotte or Greenville or West Palm Beach or Costa Mesa or St. Louis or Fort Lauderdale or Seattle or Pittsburgh or Tulsa or Cincinnati or Cleveland or Columbus or Akron or Cherry Hill or Tampa or Minneapolis or Anchorage or Salt Lake City or Norfolk or Jacksonville or Boulder or Nashville or Las Vegas or Indianapolis or San Diego or Potomac or Baton Rouge or Omaha
$120k-$160k/yr OnsiteFull Time
BDO USA
BDO USA: Provides accounting, tax, and business advisory services to organizations.
4+ YOEFour or more years of hands-on penetration testing experience, strong Windows, Linux, networking, Active Directory, scripting, reporting, client communication, and offensive security tooling skills; high school diploma required.
Kali Linux, Nessus, Tenable, Nmap, Burp Suite, Metasploit, BloodHound, Microsoft 365, OWASP Top 10 for LLM Applications, Python, PowerShell, Bash, Git, GitHub Actions, Azure DevOps, Docker, GitHub, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Splunk, Microsoft Sentinel, GitHub Copilot, Claude Code, Microsoft Azure, AWS, SAML, OAuth 2.0, OpenID Connect, Kerberos, NTLM, TCP/IP, DNS, Windows, Linux
Job PostingView all

Explore Jobs

Expand Your Job Search