Red Team Offensive Security Engineer

Cybersecurity Jobs; San Francisco (CA); Hybrid; USD 117,000 - 224,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Mental health

Parental leave

401(k)

Stock purchase program

Paid time off

Disability insurance

Job summary

Salesforce is seeking an Offensive Security Engineer to help the Red Team simulate real attackers across Salesforce products, platforms, and enterprise environments.

Role involves designing and executing end-to-end red team operations, applying threat intel to emulate APT groups, and developing custom tooling to validate security controls. Hybrid in San Francisco, with collaboration across security teams.

Qualifications

• 3+ years hands-on experience in red teaming, penetration testing, or adversary simulation.
• Experience with manual exploitation, attack chaining, and custom exploit/tooling/payload development.
• Working knowledge of threat actor TTPs across identity, applications, cloud, and hybrid enterprise environments.
• Experience bypassing layered security controls and documenting findings for technical and executive audiences.

Responsibilities

• Design and execute end-to-end red team operations simulating threat actor behavior from initial access through objective completion.
• Apply threat intelligence to emulate specific APT groups and adjust tactics as defenders respond.
• Identify, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments.
• Develop custom tooling, payloads, and techniques to validate security controls and detections.
• Partner with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises.
• Support engineering teams with root cause understanding and durable security remediation guidance.
• Serve as the technical escalation point for complex attack paths and disputed findings; mentor other engineers.
• Communicate attack chains and business risk clearly to executive leadership while following rules of engagement, scoping limits, and OPSEC.

Skills

Red teaming

Penetration testing

Adversary simulation

Threat modeling

Attack chaining

Exploit tooling

Threat intel

Cloud security

Identity security

Tools

Custom tooling

Job description

Salesforce is seeking an Offensive Security Engineer to help the Red Team simulate real attackers across Salesforce products, platforms, and enterprise environments.

Role involves designing and executing end-to-end red team operations, applying threat intel to emulate APT groups, and developing custom tooling to validate security controls. Hybrid in San Francisco, with collaboration across security teams.