Offensive Cybersecurity Engineer Jobs

1 job found

Today

Offensive Security Engineer - Red Team

Salesforce San Francisco, CA

San Francisco, CA

Today

$117k - $224k/yr Full time Ai Security Application Security Cloud Platforms

Apply Now

Job Description

Join Salesforce’s Red Team as an Offensive Security Engineer and help pressure-test Salesforce products, platforms, and enterprise environments by simulating real attackers. You’ll design and run end-to-end adversary simulations, including scenarios that examine how adversaries could abuse AI-driven systems supported by Agentforce. The team also leverages AI tools to accelerate scoping, documentation, and reporting so you can stay focused on hands-on offensive work.

This hybrid role is based in San Francisco, CA and is eligible for a hybrid work arrangement. Compensation: USD 117,200 - 223,900 per year. Minimum experience: 3 years.

What you’ll do

Design and run end-to-end red team operations that simulate threat actors from initial access through objective completion.
Use threat intelligence to emulate specific Advanced Persistent Threat (APT) groups and adapt tactics as defenders respond.
Find, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments.
Build custom tooling, payloads, and techniques to test security controls and detections.
Partner with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises.
Help engineering teams understand root causes and implement durable fixes.
Serve as a technical escalation point for complex attack paths and disputed findings, and mentor other engineers.
Communicate attack chains and business risk to executive leadership while following rules of engagement, scoping limits, and OPSEC practices.

What you bring

3+ years of hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns.
Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development.
Working knowledge of threat actor TTPs and of identity, application, cloud, and hybrid enterprise attack surfaces.
Experience bypassing layered security controls and detections, plus documenting findings and remediation guidance for both technical and executive audiences.

Helpful background

Published security research, such as CVE credits, blog posts, or conference talks.
Experience with assumed-breach or long-running adversary emulation campaigns, and collaboration with Detection and Response or purple team functions.
Malware analysis or exploit development background, and familiarity with cloud-native architectures and identity-centric security models.
Offensive security certifications including: GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), Offensive Security Certified Professional (OSCP), Offensive Security Experienced Penetration Tester (OSEP), Offensive Security Web Expert (OSWE), Certified Red Team Operator (CRTO), or Certified Red Team Lead (CRTL).

Technologies you’ll work with

AI (Agentforce)
CVE (Common Vulnerabilities and Exposures)

Benefits

Time off programs
Medical
Dental
Vision
Mental health support
Paid parental leave
Life and disability insurance
401(k)
Employee stock purchasing program

View full job page →

Get Offensive Cybersecurity Engineer Jobs alerts

New Offensive Cybersecurity Engineer Jobs, daily.