Senior Offensive Security Engineer – Penetration Testing

About the role

Join Salesforce's Offensive Security Pentest team in Israel as a hands‑on Senior Offensive Security Engineer. You will think like an attacker, uncover weaknesses across products, platforms and enterprise environments, and turn findings into lasting security improvements.

Key responsibilities

• Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems.
• Identify systemic and design‑level weaknesses, chain them across trust boundaries, and drive secure‑by‑default improvements.
• Produce clear, detailed reports with exploitation paths and prioritized remediation guidance.
• Collaborate with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response processes.
• Build tools and automation to make testing faster and more consistent.

Required profile

• Approximately 6 years of hands‑on experience in penetration testing, application security, red teaming or vulnerability research.
• Experience running complex offensive security engagements in production‑like environments, using manual exploitation, vulnerability chaining and proof‑of‑concept development.
• Strong understanding of application vulnerabilities, authentication and authorization attacks, and cloud/hybrid attack surfaces.
• Ability to communicate risk, exploitation techniques and remediation clearly to engineers, security teams and leadership.
• Relevant degree or equivalent experience.

Required skills

• Manual penetration testing of web applications, APIs, cloud platforms and containerized environments.
• Scripting or tool development to support testing.
• Knowledge of authentication, authorization and identity system security.
• Experience with vulnerability chaining and proof‑of‑concept exploitation.