HiringCafe
Join our community

20 offensive security developer jobs at 16 companies in San Francisco, CA

2mo
Save
Mark Applied
Hide
Principal Offensive Security Engineer
Palo Alto, California, United States
$168k-$271k/yr OnsiteFull Time
Palo Alto Networks
Palo Alto NetworksNASDAQ: PANW: Provides enterprise-grade network, cloud, and endpoint security software.
8+ YOE8+ years in Offensive Security/Red Teaming, cloud expertise (GCP/AWS/Azure), Kubernetes security, IaC/CI–CD security, and led pentests/red team ops.
Kubernetes, Container Security, IaC, CI/CD, Cloud Security
Job PostingView all
1w
Save
Mark Applied
Hide
Senior Offensive Security Engineer
San Mateo, California, United States
$197k-$243k/yr HybridFull Time
Roblox
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years offensive security experience; proficiency in Python or Go; experience with purple team exercises, breach/attack simulation, cloud and API security; strong technical writing and analytical skills.
Python, Go, SOAR, MITRE ATT&CK, PTES, BAS, EDR, SIEM, XDR, AWS, Azure, GCP, CI/CD
Job PostingView all
3d
Save
Mark Applied
Hide
Senior Principal Engineer, Offensive Security (2026-345)
San Jose, California, United States
$190k-$240k/yr OnsiteFull Time
Astera Labs
Astera LabsNASDAQ: ALAB: Designs connectivity solutions for cloud and AI infrastructure.
12+ YOEBachelor's in CS/CE/EE or related,12+ years offensive security experience,expertise in hardware/firmware/embedded/cloud or AD,proficiency in Python/C/C++/assembly,knowledge of MITRE ATT&CK,track record driving remediation.
Python, C, C++, Assembly, Azure, MITRE ATT&CK, PCIe, CXL, COSMOS
Job PostingView all
1w
Save
Mark Applied
Hide
Offensive Security Agent Engineer
New York City or Seattle or Washington or San Francisco or United States
$347k-$490k/yr RemoteFull Time
OpenAI
OpenAI: Develops artificial intelligence models and generative AI software services.
Staff/principal-level offensive security expertise, domain knowledge in cloud/Kubernetes/web/Linux/macOS, experience building production software and agent systems, strong judgment and communication.
Kubernetes, Linux, macOS
Job PostingView all
1mo
Save
Mark Applied
Hide
Sr. Staff Security Engineer – AI, VMR, Offensive Security
Bethesda or Palo Alto or Dallas or Seattle
$120k-$260k/yr OnsiteFull Time
GEICO
GEICO: Provides vehicle and property insurance services to consumers.
10+ YOE10+ years in security engineering with deep vulnerability management and offensive security experience; hands-on cloud (AWS/Azure/GCP), programming (Python, Go, Java), NIST CSF, compliance (PCI, SOX, NYDFS), and strong leadership and communication skills.
AWS, Azure, GCP, Python, Go, Java, NIST CSF, SIEM, SOAR, CI/CD, CMDB, AI
Job PostingView all
1w
Save
Mark Applied
Hide
Security Engineer
San Francisco, California, United States
$200k-$230k/yr OnsiteFull Time
LiteLLM
LiteLLM: Open-source AI gateway for standardizing LLM API access.
Startup security engineering experience with hands-on offensive/white-hat hacking, application and CI/CD security, demonstrated security projects and CTF success.
Python, GitHub, OpenAI, CI/CD
Job PostingView all
3w
Save
Mark Applied
Hide
Security Engineer
Berkeley, California, United States
$286k-$503k/yr HybridFull Time
METR
METR: Develops scientific methods to assess frontier AI capabilities and risks.
Deep security fundamentals across systems, networks, cloud, and identity; offensive security/red teaming; AI/LLM engineering; strong AWS (IAM) knowledge.
AWS, EKS, Lambda, ECS, IAM, SQS, CloudWatch, SecurityHub, GuardDuty, PostgreSQL, Aurora, Pulumi, DataDog, Okta, Google Workspace, Tailscale, CrowdStrike Falcon, SIEM, Kubernetes
Job PostingView all
1mo
Save
Mark Applied
Hide
Security Engineer
Los Angeles or San Francisco
$145k-$185k/yr OnsiteFull Time
Vast.ai
Vast.ai: Decentralized marketplace for GPU cloud computing resources.
Bachelor's in CS/cybersecurity, strong programming (Python or C), deep Linux and containerization knowledge, offensive and defensive security experience, familiarity with SOC 2/NIST, and security testing tools.
Python, C, Linux, Burp Suite, OWASP, SIEM, WAF, EDR
Job PostingView all
3mo
Save
Mark Applied
Hide
Platform Security Engineer
San Francisco, California, United States
OnsiteFull Time
Applied Compute
Applied Compute: Developing specialized AI agents for corporate enterprise workflows.
5+ YOE5+ years in platform security with offensive mindset; strong design, threat modeling, and incident response; proven ability to ship secure software at scale.
Cloud, Multi-tenant environments, LLMs
Job PostingView all
1mo
Save
Mark Applied
Hide
Infrastructure Security Monitoring Engineer
Menlo Park, California, United States
$122k-$181k/yr OnsiteFull Time
Meta
MetaNASDAQ: META: Develops social networking platforms and virtual reality technologies.
3+ YOEBachelor's in CS/CE or equivalent; 3+ years development experience (Python/Go), 1+ year offensive/defensive security or systems engineering; knowledge of TCP/IP and Unix; experience building defensive security systems and security monitoring.
Python, Go, Unix, TCP/IP, MITRE ATT&CK Framework
Job PostingView all
1d
Save
Mark Applied
Hide
AI Security Engineer, AI Security Unit
San Francisco, California, United States
RemoteFull Time
Check Point Software Technologies
Check Point Software TechnologiesNASDAQ: CHKP: Provides network, cloud, and mobile cybersecurity solutions.
Offensive security experience, expertise in LLM vulnerabilities and AI attack surfaces, proficiency building automation tooling, strong technical writing and client-facing skills.
OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, Model Context Protocol (MCP)
Job PostingView all
1mo
Save
Mark Applied
Hide
Product Security Engineer
San Carlos, California, United States
$138k-$250k/yr OnsiteFull Time
1X
1X: Manufacturing safe, general-purpose humanoid robots for home and work.
5+ YOE5+ years in product/offensive security; strong Linux internals, penetration testing, cryptography/PKI, cloud/CI/CD security; proficiency in C/C++, Rust, Go or Python; bachelor’s in CS/InfoSec/Engineering or equivalent.
C, C++, Rust, Go, Python, Linux, OP-TEE, fTPM, AWS, GCP, Azure, Kubernetes, CI/CD, HSM, Thales, Utimaco, AWS CloudHSM, ACME, SCEP, NVIDIA Jetson, SBOM, PKI
Job PostingView all
1d
Save
Mark Applied
Hide
Adversarial Security Test Engineer
Milpitas, California, United States
$160k-$272k/yr HybridFull Time
Sandisk
SandiskNasdaq: SNDK: Designs and manufactures flash memory and data storage products.
5+ YOEBachelor’s degree in CS/EE/Cybersecurity,5+ years offensive/firmware/product security experience,expertise in fuzzing,reverse engineering,exploit development,secure boot and attack-surface analysis,Python/C/C++ skills.
Ghidra, IDA Pro, Frida, AFL, libFuzzer, Python, C, C++
Job PostingView all
2mo
Save
Mark Applied
Hide
Staff Product Security Engineer
San Francisco, California, United States
$180k-$248k/yr HybridFull Time
Okta
OktaNASDAQ: OKTA: Provide secure identity management and authentication for enterprises.
7+ YOE7+ years in information security with deep application/offensive research or AI/ML security, hands-on assessment of LLM-integrated and agentic systems, proficiency in multiple programming languages, threat modeling, manual code review, and strong communication.
Python, Go, Java, TypeScript, C, C++, SAST, DAST, SCA, fuzzing, OIDC, OAuth 2.0, SAML, CI/CD, LLM, MCP
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Privacy Engineer (RED team) - TikTok PDPO
San Jose, California, United States
$213k-$388k/yr OnsiteFull Time
TikTok
TikTok: Global short-form video hosting and social media platform.
Hands-on offensive security/red teaming experience, strong appsec and privacy engineering knowledge, ability to threat-model privacy concepts and lead end-to-end technical assessments, strong communication skills.
MITRE ATT&CK
Job PostingView all
4w
Save
Mark Applied
Hide
Senior Red Team Operator
Minneapolis or Atlanta or Cincinnati or Cupertino or Portland or New York or Chicago or Englewood or Charlotte or Irving
$133k-$157k/yr HybridFull Time
U.S. Bank
U.S. BankNYSE: USB: Provider of personal, business, and institutional financial services.
8+ YOEBachelor's degree or equivalent, 8+ years in information security with offensive security/Red Team experience; expertise in exploit development, offensive tooling, and scripting; strong communication and leadership.
Cobalt Strike, Metasploit, Mythic, Sliver, Python, PowerShell, C/C++, C#, Go, Shell, EDR, XDR, Infrastructure as Code (IaC)
Job PostingView all

Explore Jobs

Expand Your Job Search