Penetration Testing Engineer, AI/Cloud Security

Salesforce, Inc.; United States; Remote; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Penetration Testing Engineer to execute deep, hands-on penetration tests across applications, platforms, cloud infrastructure, and AI-powered systems. You’ll apply a hacker mindset, work with AppSec to remediate findings, and build skills across cloud, identity, and AI surfaces.

You’ll collaborate with engineering and security teams, perform tests, and report actionable remediation guidance to improve security across Salesforce’s products and platforms.

Qualifications

• 2-4 years of hands-on penetration testing, offensive security, or app security testing.
• Experience performing testing in production or production-like environments using manual techniques and automation/AI tools.
• Understanding of vulnerabilities, attack chains, cloud security, and AI/LLM risks.
• Ability to clearly articulate exploitation mechanics, impact, and remediation steps to engineers.

Responsibilities

• Execute penetration tests across web apps, APIs, cloud/hybrid infrastructure, identity boundaries, and AI systems.
• Perform manual exploitation beyond automated tooling, including business logic and privilege escalation.
• Support engagements with scoping, risk assessment, and reporting with remediation guidance.
• Produce detailed reports on exploitation paths and collaborate with multiple teams on findings.

Skills

Penetration testing

Offensive security

Application security

Cloud security

AI/LLMs for offensive security

Automation/AI tools

Tools

Kubernetes

Docker

POC development

Job description

Salesforce is seeking a Penetration Testing Engineer to execute deep, hands-on penetration tests across applications, platforms, cloud infrastructure, and AI-powered systems. You’ll apply a hacker mindset, work with AppSec to remediate findings, and build skills across cloud, identity, and AI surfaces.

You’ll collaborate with engineering and security teams, perform tests, and report actionable remediation guidance to improve security across Salesforce’s products and platforms.