Principal Offensive Security Engineer

Overview

Postman is the world’s leading API platform, used by more than 45 million+ developers and 500,000 organizations, including 98% of the Fortune 500. Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration-enabling users to create better APIs, faster. The company is headquartered in San Francisco and has offic

What you'll do

• Build the Offensive AI Security Practice: Stand up and scale a dedicated offensive capability targeting AI/ML systems.
• This includes adversarial testing of LLM integrations, agentic workflows (MCP, tool-use chains), RAG pipelines, and model-serving infrastructure.
• You will define the methodology, tooling, and engagement frameworks from the ground up.
• Develop AI Threat Intelligence: Track and operationalize the rapidly evolving AI threat landscape, OWASP LLM Top 10, MITRE ATLAS, emerging attack research on agentic systems, translating external research into internal red team playbooks and detection hypotheses for Security Operations.
• Hands-On Technical Leadership Red Team AI Systems at Depth: Go beyond checkbox assessments.
• Lead structured adversarial campaigns against Postman's LLM deployments, AI agents, and model pipelines, targeting prompt injection, tool-use abuse, data exfiltration via context manipulation, training data poisoning, model manipulation, and trust boundary violations in multi-agent architectures.
• Architect Autonomous Testing: Design and deploy AI-based penetration testing platforms and autonomous agents to perform continuous security validation across our API ecosystem.
• Continuous Validation: Move from manual pentesting to Continuous Offensive Security, integrating automated breach and attack simulation (BAS) into CI/CD pipelines, including AI model deployment pipelines.

Requirements

• Practical experience with Go, Rust, LLM, RAG.
• Experience level: 8+ yrs.
• Strong written and verbal communication in English.
• Comfortable working on-site in San Francisco, California, United States.

Skills