Penetration Testing Engineer, MTS — AI & Cloud Security

Salesforce; San Francisco (CA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Penetration Testing Engineer to perform deep, hands‑on tests across applications, platforms, cloud infrastructure, and AI‑powered systems. You’ll bring a hacker mindset to real exploitation and attack chaining, guided by senior team members.

You’ll partner with engineering and AppSec to turn findings into remediation while building your skills across cloud, identity, and AI/ML surfaces. The team emphasizes collaboration and security‑minded innovation.

Qualifications

• 2-4 years of hands‑on penetration testing, offensive security, or application security testing.
• Experience performing pentesting engagements in production or production-like environments using manual techniques and automation/AI tools.
• Understanding of vulnerabilities, attack chains, IAM failures, cloud security fundamentals, and AI/LLM security risks.
• Ability to articulate exploitation mechanics, impact, and remediation steps to engineers and security teams.

Responsibilities

• Execute penetration tests across web apps, APIs, cloud/hybrid infrastructure (Kubernetes, Docker), identity and trust boundaries, and AI/ML‑enabled systems.
• Perform manual exploitation beyond automated tooling, including business logic abuse and privilege escalation.
• Support engagements through scoping, execution, risk assessment, and remediation‑oriented reporting.
• Produce detailed reports covering exploitation paths and mitigation recommendations, collaborating with engineering, AppSec, and Detection & Response teams.

Skills

Penetration testing

Offensive security

Identity and access control

AI/LLM security

Tools

Kubernetes

Docker

API security tooling

Job description

Salesforce is seeking a Penetration Testing Engineer to perform deep, hands‑on tests across applications, platforms, cloud infrastructure, and AI‑powered systems. You’ll bring a hacker mindset to real exploitation and attack chaining, guided by senior team members.

You’ll partner with engineering and AppSec to turn findings into remediation while building your skills across cloud, identity, and AI/ML surfaces. The team emphasizes collaboration and security‑minded innovation.