Offensive Security Engineer - Red Team

Cybersecurity Jobs; San Francisco (CA); Hybrid; USD 117,000 - 224,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Mental health

Parental leave

401(k)

Stock purchase program

Paid time off

Disability insurance

Job summary

Salesforce is seeking an Offensive Security Engineer to help the Red Team simulate real attackers across Salesforce products, platforms, and enterprise environments.

Role involves designing and executing end-to-end red team operations, applying threat intel to emulate APT groups, and developing custom tooling to validate security controls. Hybrid in San Francisco, with collaboration across security teams.

Qualifications

• 3+ years hands-on experience in red teaming, penetration testing, or adversary simulation.
• Experience with manual exploitation, attack chaining, and custom exploit/tooling/payload development.
• Working knowledge of threat actor TTPs across identity, applications, cloud, and hybrid enterprise environments.
• Experience bypassing layered security controls and documenting findings for technical and executive audiences.

Responsibilities

• Design and execute end-to-end red team operations simulating threat actor behavior from initial access through objective completion.
• Apply threat intelligence to emulate specific APT groups and adjust tactics as defenders respond.
• Identify, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments.
• Develop custom tooling, payloads, and techniques to validate security controls and detections.
• Partner with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises.
• Support engineering teams with root cause understanding and durable security remediation guidance.
• Serve as the technical escalation point for complex attack paths and disputed findings; mentor other engineers.
• Communicate attack chains and business risk clearly to executive leadership while following rules of engagement, scoping limits, and OPSEC.

Skills

Red teaming

Penetration testing

Adversary simulation

Threat modeling

Attack chaining

Exploit tooling

Threat intel

Cloud security

Identity security

Tools

Custom tooling

Job description

Salesforce is hiring an Offensive Security Engineer to help the Red Team simulate real attackers across Salesforce products, platforms, and enterprise environments.

Responsibilities

• Design and execute end-to-end red team operations simulating threat actor behavior from initial access through objective completion
• Apply threat intelligence to emulate specific Advanced Persistent Threat (APT) groups and adjust tactics as defenders respond
• Identify, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments
• Develop custom tooling, payloads, and techniques to validate security controls and detections
• Partner with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises
• Support engineering teams with root cause understanding and durable security remediation guidance
• Serve as the technical escalation point for complex attack paths and disputed findings; mentor other engineers
• Communicate attack chains and business risk clearly to executive leadership while following rules of engagement, scoping limits, and OPSEC

Requirements

• 3+ years hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns
• Experience with manual exploitation, attack chaining, and custom exploit/tooling/payload development
• Working knowledge of threat actor TTPs and attack surfaces across identity, applications, cloud, and hybrid enterprise environments
• Experience bypassing layered security controls and detections, plus documenting findings and remediation guidance for both technical and executive audiences

Technologies

• AI (Agentforce)
• CVE (Common Vulnerabilities and Exposures)

What you will do with AI-driven systems

• Test how attackers could abuse AI-driven systems, leveraging Agentforce integrated across the platform
• Use AI tools to help accelerate scoping, documentation, and reporting to focus time on hands‑on offensive work

Preferred experience (Even better if)

• Published security research such as CVE credits, blog posts, or conference talks
• Experience with assumed-breach or long-running adversary emulation campaigns and collaboration with Detection and Response or purple team functions
• Malware analysis or exploit development background, plus familiarity with cloud-native architectures and identity-centric security models
• Offensive security certifications: GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), OSCP, OSEP, OSWE, CRTO, CRTL

Benefits

• Time off programs
• Medical
• Dental
• Vision
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k)
• Employee stock purchasing program

Job details

• Location: San Francisco, CA (hybrid)
• Salary range: USD 117,200 - 223,900 per year
• Minimum experience: 3 years