Senior Offensive Security Engineer
HP IQ, San Francisco, CA
The role
As an Offensive Security Engineer within HP IQ’s Product Security team, you will partner closely with engineering teams to identify, validate, and mitigate security risks across the product lifecycle. You’ll influence design decisions, embed security into development workflows, and continuously assess attack surfaces to guide and enhance secure development.
What you need
- 5+ years of experience as an offensive security engineer or equivalent.
- Experience threat modeling (e.g., STRIDE) and mapping adversary techniques (e.g., MITRE ATT&CK).
- Expertise in identifying and exploiting common vulnerabilities (e.g., OWASP Top 10, SANS 25).
- Hands-on experience testing embedded systems, firmware, and device software, including bootloader security, OS hardening, and low-level interface exploitation (e.g., JTAG, UART, SPI/I2C).
- Demonstrated experience with hardware-assisted attack techniques such as fault injection, side-channel analysis, and glitching, using tools like ChipWhisperer, OpenOCD, Ghidra, Binwalk.