Penetration Testing Engineer — AI & Cloud Security

100 Salesforce, Inc.; California (MO); Hybrid; USD 117,000 - 177,000; Full time

Benefits offered by this job

Time off programs

Medical

Dental

Vision

Mental health support

Paid parental leave

Life and disability insurance

401(k)

Employee stock purchasing program

Job summary

Salesforce is seeking a Penetration Testing Engineer to drive deep, hands-on assessments of web applications, APIs, cloud infrastructure, and AI-enabled systems. You will apply a hacker mindset, go beyond checklists, and partner with engineering and AppSec teams to translate findings into concrete remediations.

The role requires 2–4 years of hands-on pentesting experience, familiarity with production-like environments, and the ability to clearly communicate exploitation mechanics and risks to

Qualifications

• 2–4 years of hands-on experience in penetration testing, offensive security, or application security testing.
• Experience performing penetration testing engagements in production or production-like environments.
• Ability to articulate exploitation mechanics, impact, and remediation steps to engineers and security teams.

Responsibilities

• Execute penetration tests across web applications, APIs, cloud/hybrid infrastructure (Kubernetes, Docker), identity and trust boundaries, and AI/ML-enabled systems.
• Perform manual exploitation beyond automated tooling, including business logic abuse and privilege escalation.
• Produce technically detailed reports covering exploitation paths, missing security controls, and mitigation recommendations; collaborate with engineering, AppSec, and Detection & Response teams on findings.

Skills

Penetration testing

Offensive security

Application security testing

Tools

Automation/AI tools

Kubernetes

Docker

Job description

Salesforce is seeking a Penetration Testing Engineer to drive deep, hands-on assessments of web applications, APIs, cloud infrastructure, and AI-enabled systems. You will apply a hacker mindset, go beyond checklists, and partner with engineering and AppSec teams to translate findings into concrete remediations.

The role requires 2–4 years of hands-on pentesting experience, familiarity with production-like environments, and the ability to clearly communicate exploitation mechanics and risks to