# Senior Offensive Security Researcher

**Company**: Salesforce
**Location**: San Francisco, California
**Experience**: senior
**Job type**: full-time
**Salary**: $148,500 - $223,900 annually
**Category**: Security
**Industry**: Technology

**Apply**: https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/California---San-Francisco/Offensive-Security-Researcher--Senior_JR365650?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_2190c338-5fd

## Description

We are looking for a Senior Offensive Security Researcher with an attacker mindset to discover, analyze, and remediate security vulnerabilities across our products and platforms.

**The Experience** You will work alongside and influence engineering teams to shape design decisions, improve security posture, and advance overall application security maturity.

**Responsibilities**

- Lead offensive security assessments (manual testing, code review, architectural analysis, threat modeling) across application ecosystems.

- Identify critical, high-impact, and systemic vulnerabilities alongside isolated issues.

- Drive security research to identify emerging attack vectors, abuse cases, and bypass techniques relevant to our applications and platforms.

- Partner closely with software engineers, tech leads, and architects to: Explain risk, impact, and exploitability. Design and implement effective remediations. Ensure fixes are scalable, maintainable, and aligned with engineering realities.

- Lead Secure by Default initiatives by: Applying security guardrails, patterns, and baseline controls. Remediating insecure defaults and unsafe configurations. Preventing vulnerabilities through platform-level and framework-level updates.

- Influence application and platform designs early in the development lifecycle to prevent vulnerabilities before release.

- Set and apply security standards, best practices, and architectural guidance during application development.

- Mentor engineers and peers by sharing security knowledge and offensive techniques.

- Collaborate with detection, monitoring, and incident response teams to improve visibility into real-world exploitation.

**Requirements**

- 7+ years of experience in Application Security or Offensive Security with an attacker mindset.

- Demonstrated experience independently finding and remediating vulnerabilities in complex applications.

- Deep understanding of: Web application security (OWASP Top 10 and beyond) Authentication & authorization flaws API security Injection attacks, logic flaws, and access control bypasses Secure design and threat modeling.

- Hands-on experience with manual security testing (beyond automated tools).

- Ability to translate complex security findings into clear, actionable guidance for engineers and technical leadership.

- Strong communication and collaboration skills, with a track record of influencing engineering teams.

**Benefits**

- Time off programs

- Medical, dental, vision

- Mental health support

- Paid parental leave

- Life and disability insurance

- 401(k)

- Employee stock purchasing program

## Skills

### Required
- Application Security
- Offensive Security
- Web application security
- Authentication & authorization flaws
- API security
- Injection attacks
- logic flaws
- access control bypasses
- Secure design
- threat modeling

### Nice to have
- Published security research or CVEs
- Experience implementing platform-level or framework-level security improvements
- Background in vulnerability discovery, security research, or red teaming
- Experience implementing Secure by Default or security-by-design concepts
- Familiarity with cloud-native architectures, microservices, and distributed systems

---

Source: [Apply at salesforce.wd12.myworkdayjobs.com](https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/California---San-Francisco/Offensive-Security-Researcher--Senior_JR365650?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)