S

Salesforce

Builds cloud software for customer relationships

Offensive Security Engineer - Red Team

Offensive Security & TestingConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • At least 3 years of hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns.
  • Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development.
  • Working knowledge of threat actor tactics, techniques, and procedures and of identity, application, cloud, and hybrid enterprise attack surfaces.
  • Experience bypassing layered security controls and detections, and documenting findings and remediation guidance for technical and executive audiences.

Responsibilities

  • Design and run end-to-end red team operations that simulate real threat actors, from initial access to objective completion; use threat intelligence to emulate specific Advanced Persistent Threat groups and adapt tactics as defenders respond.
  • Find, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments; build custom tooling, payloads, and techniques that test security controls and detections.
  • Work with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises; help engineering teams understand root causes and implement durable fixes.
  • Act as the technical escalation point for complex attack paths and disputed findings, and mentor other engineers.
  • Explain attack chains and business risk clearly to executive leadership, following rules of engagement, scoping limits, and Operational Security practices.

Desired Qualifications

  • Published security research, such as Common Vulnerabilities and Exposures credits, blog posts, or conference talks.
  • Experience with assumed-breach or long-running adversary emulation campaigns, and collaboration with Detection and Response or purple team functions.
  • Malware analysis or exploit development background, and familiarity with cloud-native architectures and identity-centric security models.
  • Offensive security certifications such as GIAC Exploit Researcher and Advanced Penetration Tester, Offensive Security Certified Professional, Offensive Security Experienced Penetration Tester, Offensive Security Web Expert, Certified Red Team Operator, or Certified Red Team Lead.

About the Company

Salesforce

Builds cloud software for customer relationships

Salesforce sells cloud software that helps businesses manage sales leads, customer service, marketing, and online commerce from shared customer records. Its flagship Sales Cloud tracks accounts and deals, while Service Cloud organizes support cases and Agentforce builds AI assistants that act on company data. Teams access these tools through a browser and connect outside apps and data sources, with Slack for work messages and Tableau for visual analysis. Salesforce earns most of its revenue from software subscriptions and support, with professional services for implementation and training. Marc Benioff co-founded Salesforce in 1999, and its headquarters are in San Francisco, California.

Company size
10,001+
Company stage
IPO
Headquarters
San Francisco, CA
Founded
1999

Recently Posted Jobs

Explore more opportunities at Salesforce

See more jobs