Description
We are looking for an Offensive Security Engineer to join our Red Team, which simulates real attackers across Salesforce products, platforms, and enterprise environments.
The role involves designing and running end-to-end red team operations that simulate real threat actors, finding and exploiting weaknesses across applications, identity, cloud, and enterprise environments, and working with the Red Team Director and other teams on campaign design and purple team exercises.
Responsibilities:
- Design and run end-to-end red team operations that simulate real threat actors
- Find, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments
- Work with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises
- Act as the technical escalation point for complex attack paths and disputed findings
Requirements:
- 3+ years of hands-on experience in red teaming, penetration testing, or adversary simulation
- Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development
- Working knowledge of threat actor tactics, techniques, and procedures (TTPs)
- Experience bypassing layered security controls and detections
Nice to Have:
- Published security research
- Experience with assumed-breach or long-running adversary emulation campaigns
- Malware analysis or exploit development background
- Familiarity with cloud-native architectures and identity-centric security models
- Offensive security certifications
Benefits:
- Hybrid work arrangement
- Support for balance and well-being
- AI agents to accelerate impact