Senior Pentest - Offensive Security

About the role

Salesforce is looking for a Senior Offensive Security Engineer to join its Offensive Security Pentest team in Israel. The role is hands-on: you think like an attacker and find weaknesses across products, platforms and the enterprise environment, then turn those findings into lasting security improvements, including for AI-powered features.

Key responsibilities

• Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems
• Uncover systemic and design-level weaknesses, chaining them across trust boundaries to push secure-by-default improvements
• Deliver clear, detailed reports with exploitation paths and prioritized fixes, helping engineers understand root causes and close gaps
• Work with engineering, security architecture, product security, detection and response and incident response teams to improve designs, alerts and response
• Build tools and automation that make testing faster and more consistent

Required profile

• About 6 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research
• Experience running complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development
• Degree or equivalent relevant experience; experience is evaluated against the core competencies of the role

Required skills

• Understanding of application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces
• Able to write scripts or tools to support testing
• Ability to explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders
• Nice to have: published security research, adversary emulation or long-running red team campaigns, AI and large language model security knowledge, and experience leading secure-by-design initiatives