Penetration Testing Engineer, MTS - AI & Cloud Security

Salesforce; Sacramento (CA); On-site; USD 117,000 - 177,000; Full time

Benefits offered by this job

Time off programs

Medical insurance

Dental insurance

Vision insurance

Mental health support

Paid parental leave

Life and disability insurance

401(k)

Employee stock purchase plan

Job summary

Salesforce is seeking a Penetration Testing Engineer to execute deep, hands-on assessments across web applications, APIs, cloud infrastructure, and AI-powered systems. You’ll bring a hacker mindset to real exploitation and drive remediation in collaboration with engineering and AppSec teams.

You’ll perform manual exploitation beyond automated tools, including business logic abuse and privilege escalation, while shaping security across identity and trust boundaries and AI surfaces.

Qualifications

• 2-4 years of hands-on experience in penetration testing, offensive security, or application security testing.
• Experience performing pentesting engagements in prod or prod-like environments using manual techniques and automation/AI tools.
• Understanding of vulnerabilities, attack chains, cloud security basics, and AI/LLM security risks.
• Ability to articulate exploitation mechanics, impact, and remediation steps to engineers.

Responsibilities

• Execute penetration tests across web apps, APIs, cloud/hybrid infrastructure (Kubernetes, Docker), identity and trust boundaries, and AI/ML-enabled systems.
• Perform manual exploitation beyond automated tooling, including business logic abuse, privilege escalation, and identity/access trust abuse.
• Support engagements through scoping, execution, risk assessment, and clear reporting with remediation guidance.
• Produce detailed reports covering exploitation paths, missing controls, and mitigation, collaborating with engineering, AppSec, and Detection & Response teams.

Skills

Hands-on experience

Penetration testing

Explain exploitation mechanics

Security collaboration

Tools

Kubernetes

Docker

Job description

Salesforce is seeking a Penetration Testing Engineer to execute deep, hands-on assessments across web applications, APIs, cloud infrastructure, and AI-powered systems. You’ll bring a hacker mindset to real exploitation and drive remediation in collaboration with engineering and AppSec teams.

You’ll perform manual exploitation beyond automated tools, including business logic abuse and privilege escalation, while shaping security across identity and trust boundaries and AI surfaces.