Description
Salesforce is looking for a Penetration Testing Engineer to execute deep, hands-on penetration tests across their applications, platforms, cloud infrastructure, and AI-powered systems.
The ideal candidate will have 2-4 years of hands-on experience in penetration testing, offensive security, or application security testing.
Responsibilities:
- Execute penetration tests across web applications, APIs, cloud/hybrid infrastructure, identity and trust boundaries, and AI/ML-enabled systems
- Perform manual exploitation beyond automated tooling
- Support engagements through scoping, execution, risk assessment, and clear reporting with remediation guidance
- Produce technically detailed reports covering exploitation paths, missing security controls, and mitigation recommendations
Requirements:
- 2-4 years of hands-on experience in penetration testing, offensive security, or application security testing
- Experience performing penetration testing engagements in production or production-like environments
- Understanding of application security vulnerabilities and attack chains, identity and access control failures, cloud security fundamentals, and security risks specific to AI and LLM-based systems
Nice to Have:
- Experience with custom scripts, payloads, or proof-of-concept development
- Participation in Bug Bounty programs
- Familiarity with cloud architectures and identity-centric security models
- Experience using AI/LLMs for offensive security work or vulnerability discovery
Benefits:
- Time off programs
- Medical, dental, vision
- Mental health support
- Paid parental leave
- Life and disability insurance
- 401(k)
- Employee stock purchasing program
The typical base salary range for this position is $117,200 - $176,700 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $141,200 - $194,200 annually.