Senior Product Red Team Engineer

Salesforce; United States; Remote; USD 149,000 - 224,000; Full time

Job summary

Salesforce seeks a Senior Offensive Security Engineer in the Red Team to attack Salesforce's product ecosystem, not the corporate network, and to translate red team results into engineering and detection improvements across a large SaaS portfolio.

Led by the Red Team Director, you will design multi-step exploit chains, perform threat modeling, and deliver technical reports with root causes and remediation guidance while collaborating with Detection and Response teams.

Qualifications

• Hands-on offensive security experience focused on web app and API attack surfaces.
• History of finding multi-step attack chains in product/SaaS environments.
• Fluency with Java, Python, Go, JS/TS, or Apex code and cloud security concepts.

Responsibilities

• Build and demonstrate multi-step attack chains across the product ecosystem, including web, API, and cross-tenant scenarios.
• Own engagements end to end: charter development, threat modeling, backlog ranking, and technical reporting with root causes and remediation guidance.
• Collaborate with Detection Engineering and Incident Response teams to validate alerts and close visibility gaps.
• Apply AI-driven testing techniques alongside traditional methods, reserving 10–20% of time for research into new attack techniques and tooling.

Skills

Web security

API security

Threat modeling

Code reading

Cloud security

Red team

Education

OSWE/GIAC/eWPTX level certs

Tools

CI/CD tooling

IaC security

Job description

Salesforce seeks a Senior Offensive Security Engineer in the Red Team to attack Salesforce's product ecosystem, not the corporate network, and to translate red team results into engineering and detection improvements across a large SaaS portfolio.

Led by the Red Team Director, you will design multi-step exploit chains, perform threat modeling, and deliver technical reports with root causes and remediation guidance while collaborating with Detection and Response teams.