Offensive Security Engineer - Red Team

Salesforce•San Francisco, CA

1d•Hybrid

About The Position

Salesforce is seeking an Offensive Security Engineer to join its Red Team, which simulates real attackers across Salesforce products, platforms, and enterprise environments. The engineer will own complex, end-to-end adversary simulations and partner with the Red Team Director on campaign design. The role includes testing how attackers could abuse AI-driven systems and using AI tools to accelerate scoping, documentation, and reporting while focusing on hands-on offensive work. The position is based in San Francisco, California, or Bellevue, Washington, and is eligible for a hybrid work arrangement.

Requirements

At least 3 years of hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns.
Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development.
Working knowledge of threat actor tactics, techniques, and procedures (TTPs), and of identity, application, cloud, and hybrid enterprise attack surfaces.
Experience bypassing layered security controls and detections.
Experience documenting findings and remediation guidance for technical and executive audiences.

Nice To Haves

Published security research, such as Common Vulnerabilities and Exposures (CVE) credits, blog posts, or conference talks.
Experience with assumed-breach or long-running adversary emulation campaigns and collaboration with Detection and Response or purple team functions.
Malware analysis or exploit development background.
Familiarity with cloud-native architectures and identity-centric security models.
Offensive security certifications such as GXPN, OSCP, OSEP, OSWE, CRTO, or CRTL.

Responsibilities

Design and run end-to-end red team operations simulating real threat actors, from initial access through objective completion.
Use threat intelligence to emulate specific Advanced Persistent Threat (APT) groups and adapt tactics as defenders respond.
Find, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments.
Build custom tooling, payloads, and techniques to test security controls and detections.
Partner with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises.
Help engineering teams understand root causes and implement durable fixes.
Serve as the technical escalation point for complex attack paths and disputed findings, and mentor other engineers.
Explain attack chains and business risk clearly to executive leadership while following rules of engagement, scoping limits, and Operational Security (OPSEC) practices.