Description
Join the Product Security team in Israel as an Offensive Security Engineer on our Red Team.
You partner with the Red Team Director to run realistic attack simulations across Salesforce products, platforms, and enterprise environments, and you help make our defenses stronger, including as AI and Agentforce reshape our attack surface.
Responsibilities:
- Run hands-on red team operations that simulate real-world attackers across applications, cloud, and enterprise environments, and chain weaknesses together to reach defined goals.
- Design and carry out end-to-end attack campaigns with the Red Team Director, including bypassing security controls and abusing identity, access, and trust relationships.
- Work with Detection and Response, Incident Response, and Engineering teams to test alerts and response workflows, and explain attack paths and root causes in clear, practical terms.
- Improve red team tools, automation, and techniques with the AI-Automation team, and mentor junior engineers.
Requirements:
- 4+ years of experience in offensive security, red teaming, or advanced penetration testing in production-like environments.
- Understand attacker methods, identity and access abuse, and attack chains across applications, infrastructure, cloud, and hybrid environments.
- Write custom scripts, tools, or payloads, and be skilled at manual exploitation.
- Communicate clearly about how an attack worked, why defenses failed, and which fixes reduce risk most.
- Degree or equivalent relevant experience required.
Nice to Have:
- Experience with continuous or programmatic red team operations, or a background in adversary emulation or purple team work.
- Experience with malware analysis or exploit development.
- Published vulnerability research, responsible disclosures, blogs, or talks.
- Knowledge of cloud-native architectures and identity-centric security models.
Benefits:
- Support for finding balance and being your best
- AI agents to accelerate your impact
- Opportunities for growth and development