Lead Offensive Security Researcher

Salesforce, Inc.; Bellevue (WA); Vor Ort; USD 149.000 - 224.000; Vollzeit

Zusammenfassung

Salesforce, Inc. is seeking a Senior Offensive Security Researcher with an attacker mindset to uncover and remediate security issues across products and platforms. You will influence engineering teams to improve security posture and advance application security maturity.

You will lead offensive security assessments, drive secure-by-default initiatives, and mentor engineers to translate findings into actionable remediation strategies that balance risk with product velocity.

Qualifikationen

• 7+ years in Application Security or Offensive Security.
• Deep understanding of Web app security, auth flaws, API security, injection and access control bypasses.
• Hands-on manual security testing experience beyond automated tools.
• Ability to translate complex findings into actionable guidance for engineers and leadership.

Aufgaben

• Lead offensive security assessments across application ecosystems (manual testing, code review, architecture analysis, threat modeling).
• Identify critical, high-impact vulnerabilities and systemic issues.
• Drive security research to identify emerging attack vectors and bypass techniques relevant to our apps and platforms.
• Collaborate with engineers to explain risk, design remediations, and ensure scalable fixes.
• Lead Secure by Default initiatives by applying guardrails, patterns, and baseline controls.
• Influence designs early in the development lifecycle to prevent vulnerabilities before release.
• Set and apply security standards, best practices, and architectural guidance.
• Mentor engineers and peers by sharing security knowledge and techniques.
• Coordinate with detection and incident response teams to improve real-world visibility.

Kenntnisse

Attacker mindset

OWASP Top 10

App security testing

Threat modeling

Communication

Mentoring

Jobbeschreibung

Salesforce, Inc. is seeking a Senior Offensive Security Researcher with an attacker mindset to uncover and remediate security issues across products and platforms. You will influence engineering teams to improve security posture and advance application security maturity.

You will lead offensive security assessments, drive secure-by-default initiatives, and mentor engineers to translate findings into actionable remediation strategies that balance risk with product velocity.