Offensive Security Researcher, Senior
Salesforce4 days ago
Base Salary
$149k - $246k/yr
Responsibilities
- Lead offensive security assessments, including manual testing, code review, architectural analysis, and threat modeling.
- Identify critical, high-impact, systemic, and isolated vulnerabilities across applications and platforms.
- Research emerging attack vectors, abuse cases, and bypass techniques.
- Partner with software engineers, technical leads, and architects to explain risks and implement scalable remediations.
- Drive secure-by-default initiatives, including security guardrails, baseline controls, safer configurations, and platform-level improvements.
- Influence application and platform designs early in development to prevent vulnerabilities before release.
- Set and apply security standards, best practices, and architectural guidance.
- Mentor engineers and peers on security knowledge and offensive techniques.
- Collaborate with detection, monitoring, and incident response teams to improve visibility into exploitation.
Requirements
- 7+ years of experience in Application Security or Offensive Security.
- Demonstrated ability to independently find and remediate vulnerabilities in complex applications.
- Deep knowledge of web application security, OWASP Top 10, authentication and authorization flaws, API security, injection attacks, logic flaws, access-control bypasses, secure design, and threat modeling.
- Hands-on experience with manual security testing beyond automated tools.
- Ability to translate complex security findings into actionable guidance for engineers and technical leaders.
- Strong communication, collaboration, and engineering-team influence skills.
- Preferred: published security research or CVEs, including technical blogs, advisories, whitepapers, or conference presentations.
- Preferred: experience with platform- or framework-level security improvements, vulnerability discovery, security research, red teaming, secure-by-default practices, and security-by-design concepts.
- Preferred: familiarity with cloud-native architectures, microservices, and distributed systems.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- The posting states that incentive compensation and equity may be available depending on the role.
- The position is offered by Salesforce; no specific remote, hybrid, or in-office arrangement is stated.
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.