Offensive Security - Red Team Engineer

About the role

Salesforce is hiring an Offensive Security Engineer on its Red Team within the Product Security team in Israel. You partner with the Red Team Director to run realistic attack simulations across Salesforce products, platforms and enterprise environments, helping strengthen defenses as AI and Agentforce reshape the attack surface.

Key responsibilities

• Run hands-on red team operations simulating real-world attackers across applications, cloud and enterprise environments, chaining weaknesses to reach defined goals.
• Design and carry out end-to-end attack campaigns with the Red Team Director, including bypassing security controls and abusing identity, access and trust relationships.
• Work with Detection and Response, Incident Response and Engineering teams to test alerts and response workflows, and explain attack paths and root causes clearly.
• Improve red team tools, automation and techniques with the AI-Automation team, and mentor junior engineers.

Required profile

• 4+ years of experience in offensive security, red teaming or advanced penetration testing in production-like environments.
• Understanding of attacker methods, identity and access abuse and attack chains across applications, infrastructure, cloud and hybrid environments.
• Degree or equivalent relevant experience; experience is evaluated against the core competencies of the role.

Required skills

• Writing custom scripts, tools or payloads and manual exploitation.
• Clear communication about how attacks work, why defenses failed and which fixes reduce risk most.
• Nice to have: continuous or programmatic red team operations, adversary emulation or purple team background, malware analysis or exploit development, published vulnerability research or talks, knowledge of cloud-native architectures and identity-centric security models.