Offensive Security Engineer - Red Team

Join Salesforce’s Red Team as an Offensive Security Engineer and help pressure-test Salesforce products, platforms, and enterprise environments by simulating real attackers. You’ll design and run end-to-end adversary simulations, including scenarios that examine how adversaries could abuse AI-driven systems supported by Agentforce. The team also leverages AI tools to accelerate scoping, documentation, and reporting so you can stay focused on hands-on offensive work.

This hybrid role is based in San Francisco, CA and is eligible for a hybrid work arrangement. Compensation: USD 117,200 - 223,900 per year. Minimum experience: 3 years.

What you’ll do

• Design and run end-to-end red team operations that simulate threat actors from initial access through objective completion.
• Use threat intelligence to emulate specific Advanced Persistent Threat (APT) groups and adapt tactics as defenders respond.
• Find, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments.
• Build custom tooling, payloads, and techniques to test security controls and detections.
• Partner with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises.
• Help engineering teams understand root causes and implement durable fixes.
• Serve as a technical escalation point for complex attack paths and disputed findings, and mentor other engineers.
• Communicate attack chains and business risk to executive leadership while following rules of engagement, scoping limits, and OPSEC practices.

What you bring

• 3+ years of hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns.
• Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development.
• Working knowledge of threat actor TTPs and of identity, application, cloud, and hybrid enterprise attack surfaces.
• Experience bypassing layered security controls and detections, plus documenting findings and remediation guidance for both technical and executive audiences.

Helpful background

• Published security research, such as CVE credits, blog posts, or conference talks.
• Experience with assumed-breach or long-running adversary emulation campaigns, and collaboration with Detection and Response or purple team functions.
• Malware analysis or exploit development background, and familiarity with cloud-native architectures and identity-centric security models.
• Offensive security certifications including: GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), Offensive Security Certified Professional (OSCP), Offensive Security Experienced Penetration Tester (OSEP), Offensive Security Web Expert (OSWE), Certified Red Team Operator (CRTO), or Certified Red Team Lead (CRTL).

Technologies you’ll work with

• AI (Agentforce)
• CVE (Common Vulnerabilities and Exposures)

Benefits

• Time off programs
• Medical
• Dental
• Vision
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k)
• Employee stock purchasing program