Offensive Security Engineer

Who we are Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us. Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future. This position is based out of Toyota Headquarters in Plano, TX Who we’re looking for  Toyota is looking for team members who are passionate about technology and interested in joining a collaborative and highly motivated team as an Offensive Security Engineer .    The primary responsibility of this role is to implement, operate, and scale AI-driven penetration testing and adversarial emulation capabilities across the enterprise, cloud, and AI-enabled systems. Develop and run AI-assisted red team tooling to simulate real-world attacker behavior at speed and scale, improving coverage, repeatability, and effectiveness across various environments. Reporting to the General Manager, the person in this role will join the Core Cybersecurity team to deploy and maintain advanced, enterprise-wide security solutions. What you’ll be doing  Develop AI-assisted applications that automate offensive security workflows including reconnaissance, vulnerability identification, exploit chaining, payload generation, and post-exploitation simulation. Integrate large language models (LLMs) and machine learning capabilities into red team pipelines to improve speed, coverage, and adaptability. Build tooling that emulates real-world attacker behavior mapped to frameworks such as MITRE ATT&CK, enabling consistent and repeatable testing at scale . Develop orchestration layers that coordinate multi-stage attack simulations across on-prem, cloud, and containerized infrastructure. Build data pipelines that ingest security telemetry, scan results, and threat intelligence feeds to inform and prioritize automated testing campaigns What you bring Bachelor's degree in Computer Science or related field, or equivalent work experience.  5+ years of experience in cybersecurity or related field with a demonstrated focus on building security tooling, automation platforms, or AI/ML-integrated applications.  Strong software development skills, with proficiency in Python, PowerShell, and other relevant languages.  Familiarity with Red Team and the MITRE ATT&CK framework methodologies.  Knowledge of common security controls, best practices, and attacker techniques.  Hands-on experience integrating LLMs models into applications via APIs (e.g. OpenAI, Anthropic, or similar), including prompt engineering, tool use, and agentic workflow design. Excellent problem-solving and analytical skills. Strong communication and collaboration skills, with the ability to work effectively within a team.  Added bonus if you have Hands-on experience with AI agentic development practices. Experience vulnerability management, and remediation processes.  Experience in red teaming or purple team exercises at enterprise scale Master's degree in Computer Science, Cybersecurity, or a related discipline.  Relevant certifications, such as CISSP, CISM, or OSCP, are highly desirable.  What We’ll Bring During your interview process, our team can fill you in on