Penetration Testing Engineer, Cloud & AI Security

Salesforce, Inc.; Northern (KY); Hybrid; USD 117,000 - 177,000; Full time

Job summary

Salesforce, Inc. is seeking a Penetration Testing Engineer to execute deep, hands-on security tests across applications, cloud infrastructure, and AI-enabled systems.

You will partner with AppSec and engineering teams to turn findings into concrete remediation, while building skills in cloud, identity, and AI/ML attack surfaces. Ideal candidates have 2–4 years of hands-on testing experience, knowledge of cloud architectures, and the ability to clearly articulate exploitation mechanics and

Qualifications

• 2–4 years of hands-on experience in penetration testing, offensive security, or application security testing.
• Experience performing penetration testing engagements in production or production-like environments using manual techniques and automation/AI tools.
• Ability to articulate exploitation mechanics, impact, and practical remediation steps to engineers and security teams.

Responsibilities

• Execute penetration tests across web applications, APIs, cloud/hybrid infrastructure, identity and trust boundaries, and AI-enabled systems.
• Perform manual exploitation beyond automated tooling, including business logic abuse, privilege escalation, and identity/access trust issues.
• Support engagements through scoping, execution, risk assessment, and clear remediation guidance.
• Produce detailed reports covering exploitation paths, missing security controls, and mitigation recommendations.

Skills

Penetration testing

Offensive security

Application security testing

Cloud security fundamentals

AI/LLMs for security

Tools

Kubernetes

Docker

AI tooling

Job description

Salesforce, Inc. is seeking a Penetration Testing Engineer to execute deep, hands-on security tests across applications, cloud infrastructure, and AI-enabled systems.

You will partner with AppSec and engineering teams to turn findings into concrete remediation, while building skills in cloud, identity, and AI/ML attack surfaces. Ideal candidates have 2–4 years of hands-on testing experience, knowledge of cloud architectures, and the ability to clearly articulate exploitation mechanics and