Offensive Security Engineer – Red Team

About the role

Join Salesforce's Product Security team in Israel as an Offensive Security Engineer on the Red Team. You will partner with the Red Team Director to run realistic attack simulations across Salesforce products, platforms, and enterprise environments, helping to strengthen defenses as AI and Agentforce reshape the attack surface.

Key responsibilities

• Run hands‑on red‑team operations that simulate real‑world attackers across applications, cloud, and enterprise environments, chaining weaknesses to achieve defined goals.
• Design and execute end‑to‑end attack campaigns, including bypassing security controls and abusing identity, access, and trust relationships.
• Collaborate with Detection & Response, Incident Response, and Engineering teams to test alerts, response workflows, and explain attack paths and root causes.
• Improve red‑team tools, automation, and techniques with the AI‑Automation team, and mentor junior engineers.

Required profile

• 4+ years of experience in offensive security, red teaming, or advanced penetration testing in production‑like environments.
• Deep understanding of attacker methods, identity and access abuse, and attack chains across applications, infrastructure, cloud, and hybrid environments.
• Ability to write custom scripts, tools, or payloads and perform manual exploitation.
• Clear communication of how attacks work, why defenses failed, and which fixes reduce risk most.

Required skills

• Offensive security and red‑team methodologies.
• Advanced penetration testing techniques.
• Scripting and tool development for custom exploits.
• Knowledge of cloud‑native architectures and identity‑centric security models.