Penetration Testing Engineer, MTS | Offensive Security

Salesforce, Inc.; San Francisco (CA); On-site; USD 117,000 - 177,000; Full time

Benefits offered by this job

Time off programs

Medical

Dental

Vision

Mental health support

Paid parental leave

Life and disability insurance

401(k)

Employee stock purchasing program

Job summary

Salesforce, Inc. is seeking a Penetration Testing Engineer to perform deep, hands-on security testing across web apps, APIs, cloud platforms, and AI-powered systems.

You will apply a hacker mindset to exploit and chain vulnerabilities, guided by senior team members in complex engagements. Collaborate with engineering and AppSec to turn findings into remediation while expanding expertise in cloud, identity, and AI/ML surfaces.

Qualifications

• 2–4 years of hands-on penetration testing, offensive security, or application security testing.
• Experience performing engagements in production or production-like environments with manual and automated techniques, including AI tools.
• Knowledge of vulnerabilities, attack chains, cloud security principles, and AI/LLM security risks.
• Ability to articulate exploitation, impact, and remediation steps to engineers.

Responsibilities

• Execute penetration tests across web apps, APIs, cloud/hybrid infra (Kubernetes, Docker), and AI-enabled systems.
• Perform manual exploitation beyond automated tooling, including business logic abuse and privilege escalation.
• Support scoping, execution, risk assessment, and reporting with remediation guidance.
• Produce detailed reports on exploitation paths and mitigation, collaborating with multiple teams.

Skills

Penetration testing experience

Offensive security

Application security testing

AI/LLM security

Tools

Kubernetes

Docker

Cloud platforms

Job description

Salesforce, Inc. is seeking a Penetration Testing Engineer to perform deep, hands-on security testing across web apps, APIs, cloud platforms, and AI-powered systems.

You will apply a hacker mindset to exploit and chain vulnerabilities, guided by senior team members in complex engagements. Collaborate with engineering and AppSec to turn findings into remediation while expanding expertise in cloud, identity, and AI/ML surfaces.