Senior Red Team Security Engineer — Offensive AI Attacks

100 Salesforce, Inc.; California; Hybrid; USD 149,000 - 224,000; Full time

Job summary

Salesforce is seeking a Senior Offensive Security Engineer, Red Team to design and run adversary simulations across the product ecosystem, focusing on multi-step exploitation and end-to-end abuse of web apps, APIs, and identity systems.

You will work with the Red Team Director on threat modeling, backlogs, and remediation guidance, collaborating with Detection Engineering and Incident Response teams to validate alerts and improve detections.

Qualifications

• Deep, hands-on offensive security experience focusing on web app and API attack surfaces.
• Experience finding multi-step attack chains in SaaS/red-team contexts.
• Strong knowledge of auth bypasses, business logic abuse, SSRF, IDOR, OAuth/SAML/OIDC attacks.
• Familiarity with multi-tenant isolation failures, identity federation (SAML, OIDC, OAuth).
• Ability to read production code at scale in Java, Python, Go, JavaScript, or Apex.

Responsibilities

• Build and demonstrate multi-step attack chains across the product ecosystem (web, API, identity, and trust boundaries).
• Own engagements end-to-end: charter development, threat modeling, backlog, and technical reporting with root causes and remediation guidance.
• Collaborate with Detection Engineering, Detection and Response, and Incident Response to validate alerts and close visibility gaps.
• Apply AI-driven testing techniques alongside manual tradecraft, dedicating time to research new attack techniques.

Skills

Web application security

API security

Multi-tenant isolation

Cloud security

Programming/scripting

Tools

Java

Python

Go

JavaScript

Apex

Job description

Salesforce is seeking a Senior Offensive Security Engineer, Red Team to design and run adversary simulations across the product ecosystem, focusing on multi-step exploitation and end-to-end abuse of web apps, APIs, and identity systems.

You will work with the Red Team Director on threat modeling, backlogs, and remediation guidance, collaborating with Detection Engineering and Incident Response teams to validate alerts and improve detections.