Red Team Offensive Security Engineer — Hybrid

Salesforce, Inc.; Bellevue (WA); Hybrid; USD 117,000 - 224,000; Full time

Job summary

Salesforce, Inc. is seeking an Offensive Security Engineer to join the Red Team. You will design and run end-to-end adversary simulations across Salesforce products, platforms, and enterprise environments in a hybrid role based in San Francisco or Bellevue.

You will build custom tooling and exploit techniques, mentor others, and translate complex attack paths into clear risk guidance for executives, while adhering to OPSEC and engagement rules.

Qualifications

• 3+ years of hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns.
• Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development.
• Working knowledge of threat actor tactics, techniques, and procedures (TTPs) and identity, application, cloud, and hybrid enterprise attack surfaces.
• Experience bypassing layered security controls and detections, and documenting findings and remediation guidance for technical and executive audiences.

Responsibilities

• Design and run end-to-end red team operations that simulate real threat actors, from initial access to objective completion.
• Find, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments.
• Work with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises.
• Act as the technical escalation point for complex attack paths and mentor other engineers.

Skills

Red teaming

Penetration testing

Exploitation development

Threat intelligence

Threat modeling

Identity security

Tools

Custom tooling

Payload development

Exploit tooling

Job description

Salesforce, Inc. is seeking an Offensive Security Engineer to join the Red Team. You will design and run end-to-end adversary simulations across Salesforce products, platforms, and enterprise environments in a hybrid role based in San Francisco or Bellevue.

You will build custom tooling and exploit techniques, mentor others, and translate complex attack paths into clear risk guidance for executives, while adhering to OPSEC and engagement rules.