Senior Offensive Security Manager (AI)

Salary: $275,000 – $300,000

Company

Postman is the world’s leading API platform used by over 45 million developers and 500,000 organizations to simplify the API lifecycle.

What you will do

• Define and execute a multi-year offensive security roadmap aligning Red and Purple team capabilities.
• Establish and scale an Offensive AI Security practice targeting LLM integrations, RAG pipelines, and agentic workflows.
• Lead high-impact adversarial campaigns and "Exploitable Demonstrations" to foster a security culture within engineering.
• Architect autonomous AI-based penetration testing platforms for continuous security validation in CI/CD pipelines.
• Manage and mentor a high-performing team of offensive security engineers and AI red team operators.
• Translate technical findings into business-level risk narratives for executive leadership and the board.

Requirements

• Minimum 8 years in offensive security (red teaming, exploit dev) and 4+ years in people management.
• Demonstrated expertise attacking AI/ML systems, including LLM red teaming and prompt injection.
• Deep understanding of cloud-native attack paths (AWS) and API-specific vulnerabilities (BOLA, BFLA).
• Proven ability to build and scale an offensive security program from the ground up.
• Must be based in the San Francisco Bay Area for full-time onsite work.

Nice to have

• Industry presence through conference talks (DEF CON, Black Hat) or published CVEs.
• Certifications: OSCP, OSCE, OSEP, GXPN, or AI-specific credentials like GIAC GMAI.
• Hands-on experience with AI-augmented tools like PentestGPT, PyRIT, or Garak.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and ISO 42001.

Culture & Benefits

• Comprehensive medical coverage, flexible PTO, and wellness reimbursement.
• Monthly lunch stipend and frequent team-building events.
• In-person collaboration focused culture with an office-centric model.
• Inclusive environment with a donation-matching program.