12 hours ago
Base Salary
$150k - $240k/yr
Responsibilities
- Lead penetration tests and security assessments for product and feature releases.
- Identify vulnerabilities through continuous security engagements and drive remediation to closure.
- Advise engineering and product teams on remediation strategies, validate fixes, and track security posture improvements.
- Assess attack surfaces across internet-facing services, APIs, and device interfaces including Wi-Fi, BLE, and USB.
- Perform threat modeling and security architecture reviews to influence product decisions.
- Lead risk-reduction initiatives and align offensive security findings with strategic investments.
- Define the offensive security roadmap, assessment scope, tooling, and methodology standards.
Requirements
- At least 5 years of experience as an offensive security engineer or equivalent.
- Experience with threat modeling, including STRIDE, and adversary-technique mapping such as MITRE ATT&CK.
- Expertise identifying and exploiting common vulnerabilities including OWASP Top 10 and SANS 25.
- Hands-on experience testing embedded systems, firmware, and device software, including bootloader security, OS hardening, and low-level interface exploitation.
- Experience with fault injection, side-channel analysis, and glitching using tools such as ChipWhisperer, OpenOCD, Ghidra, and Binwalk.
- Proficiency in at least one of Go, Python, Java, or TypeScript for offensive tooling, exploits, or automation.
- Ability to communicate security findings, risk posture, and strategic recommendations to engineering and executive stakeholders.
- Preferred experience includes securing AI products or edge-connected systems, building offensive security practices, validating SOC 2, ISO 27001, or PCI DSS controls, formalizing secure-by-design standards, and contributing security research or CVE disclosures.
Benefits
- Health, dental, and vision insurance.
- Long-term and short-term disability insurance, employee assistance program, flexible spending account, and life insurance.
- Four to twelve weeks of fully paid parental leave based on tenure, 11 paid holidays, and flexible paid vacation and sick leave.
- Flexible work environment with autonomy and flexibility.
- Full-time employee benefits package; salary range is $150,000-$240,000.
About HP IQ
HP IQ is HP’s in-house AI innovation lab that builds AI software and platform capabilities to infuse intelligence across HP’s PCs, peripherals, and print services for consumers and enterprises. The team develops on-device and cloud systems, connectivity software, and cross-device experiences used across HP’s portfolio. HP IQ operates within HP Inc. (NYSE: HPQ), a public company headquartered in Palo Alto, California, giving the lab broad product reach and distribution.