Senior Offensive Security Researcher: Secure-by-Default

Salesforce, Inc.; San Francisco (CA); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce, Inc. is seeking a Senior Offensive Security Researcher with an attacker mindset to identify and remediate security vulnerabilities across our products and platforms. You will influence design decisions, drive secure-by-default initiatives, and partner with engineers to implement scalable mitigations.

The role emphasizes threat modeling, manual testing, and advanced vulnerability discovery, with mentorship to peers and collaboration with incident response teams.

Qualifications

• 7+ years of experience in Application Security or Offensive Security.
• Strong skills in web app security, authentication/authorization flaws, and threat modeling.
• Ability to translate security findings into clear guidance for engineers and leadership.

Responsibilities

• Lead offensive security assessments (manual testing, code review, architectural analysis, threat modeling).
• Identify critical, high-impact, and systemic vulnerabilities alongside isolated issues.
• Drive security research to identify emerging attack vectors, abuse cases, and bypass techniques relevant to our applications and platforms.
• Partner closely with software engineers, tech leads, and architects to: Explain risk, impact, and exploitability. Design and implement effective remediations. Ensure fixes are scalable, maintainable, and aligned with engineering realities.
• Lead Secure by Default initiatives by: Applying security guardrails, patterns, and baseline controls. Remediating insecure defaults and unsafe configurations. Preventing vulnerabilities through platform-level and framework-level updates.
• Influence application and platform designs early in the development lifecycle to prevent vulnerabilities before release.
• Set and apply security standards, best practices, and architectural guidance during application development.
• Mentor engineers and peers by sharing security knowledge and offensive techniques.

Skills

Offensive security

Threat modeling

Security assessments

Code review

Security governance

Mentoring

Clear communication

Job description

Salesforce, Inc. is seeking a Senior Offensive Security Researcher with an attacker mindset to identify and remediate security vulnerabilities across our products and platforms. You will influence design decisions, drive secure-by-default initiatives, and partner with engineers to implement scalable mitigations.

The role emphasizes threat modeling, manual testing, and advanced vulnerability discovery, with mentorship to peers and collaboration with incident response teams.