Principal Offensive Security Researcher

About the role

Salesforce is looking for a Principal Offensive Security Researcher to join its Security Research team in Israel. You will lead advanced offensive security initiatives, hunting for real‑world attack paths across Salesforce’s cloud infrastructure, applications and services.

Key responsibilities

• Lead advanced penetration testing, red‑team operations, and security research to uncover high‑impact vulnerabilities.
• Develop custom tools, exploits and attack techniques that emulate real‑world adversaries.
• Partner with product teams to translate findings into remediation and stronger secure design practices.
• Mentor team members and present findings to technical and executive audiences.

Required profile

• 10+ years of hands‑on offensive security experience (penetration testing, red teaming, application security research or vulnerability discovery).
• Proven track record of identifying and exploiting complex vulnerabilities in web applications, APIs, cloud environments or infrastructure.
• Strong programming or scripting skills (Python, Go, Bash, PowerShell) and solid understanding of attack frameworks (MITRE ATT&CK) and vulnerability classes (OWASP, CWE).

Required skills

• Python, Go, Bash, PowerShell scripting.
• Experience with cloud platforms (AWS, GCP, Azure) and container orchestration (Kubernetes, Docker).
• Familiarity with MITRE ATT&CK, OWASP Top 10, CWE taxonomy.
• Hands‑on experience with penetration testing and red‑team methodologies.