# Lead or Senior Offensive Security Engineer

**Company**: Salesforce
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/Israel---Tel-Aviv/Lead-AI-Automation-Developer_JR353563?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_8bf3af76-7e3

## Description

We are looking for a passionate Lead or Senior Offensive Security Engineer for our growing Offensive Security Automation team. This hands-on offensive security position requires a cyber security professional whose primary focus is to perform security assessments and vulnerability research using internal AI tools using frontier models, with a focus of designing and developing the AI automation and autonomous harnesses together with the team.

**Responsibilities:**

- Perform security assessments and vulnerability research across web applications, APIs, and cloud/hybrid infrastructure, using internal AI tools and frontier models to scale coverage and depth.

- Make sure our internal solution can perform exploitation, vulnerability chaining, business logic and authorization abuse, privilege escalation, and lateral movement, beyond what automated tooling alone can find.

- Run end-to-end engagements: scoping, execution, reporting, and remediation guidance.

- Discover systemic/architectural weaknesses, not just isolated bugs, and drive secure-by-default fixes.

- Partner with engineering, security architecture, and detection & response teams to close root causes and validate control effectiveness.

- Produce high-quality technical reports with clear exploitation paths and prioritized remediation.

- Develop the automation and autonomous harnesses that direct frontier models to perform offensive security testing continuously and at scale.

- Design agent-based workflows that reason over large data, plan for risk signals, business logic and execute multi-step offensive testing that will adapt based on results, recon, hypothesis ranking, chaining of bugs exploitation, AI-Driven assessments, and reporting.

- Establish human-in-the-loop checkpoints so automation scales offensive coverage without sacrificing safety or precision.

- Translate your own tradecraft into reusable, explainable automation that the team can run and build on.

**Requirements:**

- 6+ years (Senior) / 8+ years (Lead) hands-on offensive security experience such as pentesting, red teaming, or app/security research, with proven complex engagement delivery.

- Deep, must-have vulnerability knowledge in cloud and web application security: OWASP Top 10+ vulnerability classes, identity/authz attack vectors, and cloud/hybrid attack surfaces.

- Hands-on experience using internal AI tools and frontier models to perform or accelerate security testing, not just conceptual familiarity!

- Software engineering fundamentals: System design, API integration, working with distributed services and technologies.

- Ability to write custom scripts/tooling/payloads and contribute to building automation and autonomous harnesses including prompt engineering.

- Excellent written and verbal communication skills.

**Nice to Have:**

- Experience with agentic frameworks, prompt optimization, agent evaluation, or lightweight model fine-tuning.

- Published security research, CVEs, or conference talks.

- Familiarity with MITRE ATT&CK/ATLAS and offensive AI/ML attack surfaces (prompt injection, agentic privilege abuse).

**Benefits:**

- Unleash Your Potential: Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best.

## Skills

### Required
- offensive security
- vulnerability research
- internal AI tools
- frontier models
- cloud security
- web application security
- software engineering
- scripting
- communication skills

### Nice to have
- agentic frameworks
- prompt optimization
- agent evaluation
- lightweight model fine-tuning
- security research
- CVEs
- conference talks
- MITRE ATT&CK/ATLAS

---

Source: [Apply at salesforce.wd12.myworkdayjobs.com](https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/Israel---Tel-Aviv/Lead-AI-Automation-Developer_JR353563?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)