Offensive Security Engineer - Red Team

Salesforce is hiring an Offensive Security Engineer to help the Red Team simulate real attackers across Salesforce products, platforms, and enterprise environments.

Responsibilities

• Design and execute end-to-end red team operations simulating threat actor behavior from initial access through objective completion
• Apply threat intelligence to emulate specific Advanced Persistent Threat (APT) groups and adjust tactics as defenders respond
• Identify, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments
• Develop custom tooling, payloads, and techniques to validate security controls and detections
• Partner with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises
• Support engineering teams with root cause understanding and durable security remediation guidance
• Serve as the technical escalation point for complex attack paths and disputed findings; mentor other engineers
• Communicate attack chains and business risk clearly to executive leadership while following rules of engagement, scoping limits, and OPSEC

Requirements

• 3+ years hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns
• Experience with manual exploitation, attack chaining, and custom exploit/tooling/payload development
• Working knowledge of threat actor TTPs and attack surfaces across identity, applications, cloud, and hybrid enterprise environments
• Experience bypassing layered security controls and detections, plus documenting findings and remediation guidance for both technical and executive audiences

Technologies

• AI (Agentforce)
• CVE (Common Vulnerabilities and Exposures)

What you will do with AI-driven systems

• Test how attackers could abuse AI-driven systems, leveraging Agentforce integrated across the platform
• Use AI tools to help accelerate scoping, documentation, and reporting to focus time on hands-on offensive work

Preferred experience (Even better if)

• Published security research such as CVE credits, blog posts, or conference talks
• Experience with assumed-breach or long-running adversary emulation campaigns and collaboration with Detection and Response or purple team functions
• Malware analysis or exploit development background, plus familiarity with cloud-native architectures and identity-centric security models
• Offensive security certifications: GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), OSCP, OSEP, OSWE, CRTO, CRTL

Benefits

• Time off programs
• Medical
• Dental
• Vision
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k)
• Employee stock purchasing program

Job details

• Location: San Francisco, CA (hybrid)
• Salary range: USD 117,200 - 223,900 per year
• Minimum experience: 3 years