Mid-Senior Offensive Security Engineer (Pentest)

About the role

Join Salesforce's Offensive Security Pentest team in Israel as a hands‑on Mid‑Senior Offensive Security Engineer. You will think like an attacker, uncover weaknesses across our products, platforms and enterprise environment, and turn findings into lasting security improvements, including for AI‑powered features.

Key responsibilities

• Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems, demonstrating real‑world impact.
• Identify systemic and design‑level weaknesses, chain them across trust boundaries, and drive secure‑by‑default improvements.
• Produce clear, detailed reports with exploitation paths and prioritized remediation guidance.
• Collaborate with engineering, security architecture, product security, detection and response, and incident response teams to improve designs and alerts.
• Build tools and automation to make testing faster and more consistent.

Required profile

• Approximately 4 years of hands‑on experience in penetration testing, application security, red teaming or vulnerability research.
• Experience running complex offensive engagements in production‑like environments using manual exploitation, vulnerability chaining and proof‑of‑concept development.
• Strong understanding of application vulnerabilities, authentication/authorization attacks, and cloud‑hybrid attack surfaces.
• Ability to write scripts or tools to support testing and clearly explain risk, exploitation techniques and remediation to technical and non‑technical audiences.
• Relevant degree or equivalent experience; core competencies may be demonstrated through leadership, military, volunteer or work experience.

Required skills

• Penetration testing of web applications, APIs, cloud and container platforms.
• Manual exploitation and vulnerability chaining.
• Scripting for security testing (e.g., Python, Bash).
• Knowledge of authentication, authorization, and identity system attacks.