Offensive Security Engineer - Red Team

Salesforce is hiring an Offensive Security Engineer to help the Red Team simulate real attackers across Salesforce products, platforms, and enterprise environments.

• Design and execute end-to-end red team operations simulating threat actor behavior from initial access through objective completion
• Apply threat intelligence to emulate specific Advanced Persistent Threat (APT) groups and adjust tactics as defenders respond
• Identify, exploit, and chain weaknesses across applications
  , identity
  , cloud
  , and enterprise environments
• Develop custom tooling
  , payloads
  , and techniques to validate security controls and detections
• Partner with the Red Team Director
  , Detection and Response
  , Detection Engineering
  , and Blue Teams on campaign design and purple team exercises
• Support engineering teams with root cause understanding and durable security remediation guidance
• Serve as the technical escalation point for complex attack paths and disputed findings; mentor other engineers
• Communicate attack chains and business risk clearly to executive leadership while following rules of engagement
  , scoping limits
  , and OPSEC

• 3+ years hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns
• Experience with manual exploitation
  , attack chaining
  , and custom exploit/tooling/payload development
• Working knowledge of threat actor TTPs and attack surfaces across identity
  , applications
  , cloud
  , and hybrid enterprise environments
• Experience bypassing layered security controls and detections, plus documenting findings and remediation guidance for both technical and executive audiences

• AI (Agentforce)
• CVE (Common Vulnerabilities and Exposures)

• Test how attackers could abuse AI-driven systems
  , leveraging Agentforce integrated across the platform
• Use AI tools to help accelerate scoping
  , documentation
  , and reporting to focus time on hands‑on offensive work

• Published security research such as CVE credits
  , blog posts
  , or conference talks
• Experience with assumed-breach or long-running adversary emulation campaigns and collaboration with Detection and Response or purple team functions
• Malware analysis or exploit development background, plus familiarity with cloud-native architectures and identity-centric security models
• Offensive security certifications:
  GIAC Exploit Researcher and Advanced Penetration Tester (GXPN),
  OSCP
  , OSEP
  , OSWE
  , CRTO
  , CRTL

• Time off programs
• Medical
• Dental
• Vision
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k)
• Employee stock purchasing program

• Location: San Francisco, CA (hybrid)
• Salary range: USD 117, per year
• Minimum experience: 3 years