Postman
Principal Offensive Security Engineer
$275K–$300K
San Francisco, CA, US · Principal · Full-time · Posted Sep 17, 2026
- Experience
- Minimum 8 years in offensive security; at least 4 years in people management or leadership, including managing managers or tech leads.
About the job
Own Postman’s offensive security strategy and lead a team conducting red-team operations, continuous security validation, and adversarial testing of AI systems and API infrastructure.
What you'll do
- Set the multi-year offensive security roadmap and build an offensive AI security practice.
- Lead adversarial campaigns against AI/ML systems and deploy automated penetration-testing and continuous validation capabilities.
- Manage and develop the offensive security team, communicate findings to executives and engineers, and partner across security and engineering teams.
What they ask for
- At least 8 years in offensive security and 4 years in people management or leadership, including managing managers or tech leads.
- Demonstrated experience attacking AI/ML systems and building or maturing an offensive security program.
- Experience setting OKRs, managing budgets, and presenting to executive leadership.
- Hands-on familiarity with AI-augmented penetration-testing tools and AI red-team frameworks; ability to build evaluation harnesses and adversarial test suites.
Nice to have
- Contributions to the offensive security or AI security community; listed hands-on offensive security certifications or equivalent.
- Cloud security, API security, and compliance awareness.
Pay
$275,000 to $300,000 (USD, base salary)
Tools
MCP, RAG, PentestGPT, Horizon3, Microsoft PyRIT, Garak, AWS, Kubernetes
AI focus
Build an offensive AI security practice and lead adversarial testing of LLM integrations, agents, RAG pipelines, model infrastructure, and AI deployment pipelines; develop AI-based testing platforms and autonomous agents.
Model-written summary · the original posting is authoritative