Red Team Offensive Security Engineer

Salesforce; San Francisco (CA); Hybrid; USD 117,000 - 224,000; Full time

Job summary

Salesforce is seeking an Offensive Security Engineer - Red Team. This role is based in San Francisco, CA or Bellevue, WA with a hybrid work arrangement. You will design and run end-to-end red team operations simulating real threat actors across Salesforce products and environments.

You will build custom tooling and payloads, exploit chains, and test security controls. You’ll collaborate with the Red Team Director, Detection and Response, and Blue Teams, mentor engineers, and clearly communicate

Qualifications

• 3+ years hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns.
• Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development.
• Working knowledge of threat actor tactics, techniques, and procedures (TTPs) and of identity, application, cloud, and hybrid enterprise attack surfaces.
• Experience bypassing layered security controls and documenting findings and remediation guidance for technical and executive audiences.

Responsibilities

• Design and run end-to-end red team operations that simulate real threat actors, from initial access to objective completion.
• Find, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments. Build custom tooling, payloads, and techniques that test security controls and detections.
• Work with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises. Help engineering teams understand root causes and put durable fixes in place.
• Act as the technical escalation point for complex attack paths and disputed findings, and mentor other engineers. Explain attack chains and business risk clearly to executive leadership, following all rules of engagement, scoping limits, and Operational Security (OPSEC) practices.

Skills

Red team experience

Manual exploitation

Threat intelligence & TTPs

Documentation of findings

Tools

Custom exploit tooling

Payload development

Cloud/Identity security

Job description

Salesforce is seeking an Offensive Security Engineer - Red Team. This role is based in San Francisco, CA or Bellevue, WA with a hybrid work arrangement. You will design and run end-to-end red team operations simulating real threat actors across Salesforce products and environments.

You will build custom tooling and payloads, exploit chains, and test security controls. You’ll collaborate with the Red Team Director, Detection and Response, and Blue Teams, mentor engineers, and clearly communicate