Principal Offensive Security Engineer

Ovii's Interpretation of the Role

Postman seeks a Principal Offensive Security Engineer to define and lead its AI‑focused red‑team program. The role combines strategic program ownership, hands‑on adversarial testing of AI/ML systems, and people leadership across a global API platform.

Role Snapshot

• Lead offensive security strategy
• Build AI red‑team capability
• Manage and grow security engineers
• Drive executive and board communication
• Integrate AI testing into CI/CD pipelines
• Partner with GRC and product security

Must-Have Requirements

• offensive security (penetration testing, red teaming)
• AI/ML offensive research and adversarial testing
• people management / team leadership
• cloud security (AWS)
• API security attack methodologies
• security automation & CI/CD integration
• AI threat intelligence development
• security tooling (PentestGPT, Horizon3, custom LLM fuzzing)
• offensive security
• people management

Nice-to-Have Signals

• community contributions (talks, papers, open‑source tools)
• certifications such as OSCP, OSCE, OSEP, GXPN, GPEN, CRTP, GIAC GMAI
• familiarity with compliance frameworks (SOC 2, ISO 27001, FedRAMP, CMMC)
• AI/ML offensive research
• security community contributions
• offensive certifications
• OSCP
• OSCE
• OSEP
• GXPN
• GPEN
• CRTP
• GIAC GMAI

Work Setup

• Work mode: ONSITE
• Employment type: Full-Time

Not Specified in JD

• Visa sponsorship
• Relocation

What You'll Likely Work On

• Define and execute a multi‑year offensive security roadmap aligned with Red and Purple Team goals
• Stand up and scale an AI‑focused offensive security practice, including LLM and agentic workflow testing
• Develop AI threat intelligence and translate research into internal playbooks
• Lead structured adversarial campaigns against AI models and model‑serving pipelines
• Design autonomous AI‑based penetration testing platforms for continuous validation
• Embed automated breach‑and‑attack simulation into CI/CD for AI model deployments
• Build, manage, and mentor a high‑performing team of offensive security engineers
• Present live exploit demonstrations to engineering teams and executive leadership

Good Fit If You Have

• Passionate about advancing AI security research
• Strong communicator who can translate technical exploits into business risk narratives
• Proven ability to scale security programs and influence senior leadership