Offensive Security Researcher
Salesforce1 day ago
Tel Aviv-Yafo, IsraelMid Level
Responsibilities
- Conduct offensive security assessments through manual testing, code review, architectural analysis, and threat modeling.
- Identify critical, high-impact, systemic, and isolated vulnerabilities across applications and platforms.
- Research emerging attack vectors, abuse cases, and bypass techniques.
- Partner with software engineers, technical leads, and architects to explain risks and implement scalable remediations.
- Execute secure-by-default initiatives, including security guardrails, baseline controls, and remediation of insecure defaults.
- Review application and platform designs early in development to prevent vulnerabilities before release.
- Share offensive security knowledge with engineering teams and collaborate with detection, monitoring, and incident response teams.
Requirements
- At least 3 years of experience in Application Security or Offensive Security with an attacker mindset.
- Demonstrated experience finding and remediating vulnerabilities in complex applications.
- Strong knowledge of web application security, authentication and authorization flaws, API security, injection attacks, logic flaws, access-control bypasses, secure design, and threat modeling.
- Hands-on experience with manual security testing beyond automated tools.
- Ability to translate complex security findings into clear, actionable engineering guidance.
- Strong communication and collaboration skills.
- Preferred: published security research or CVEs, platform- or framework-level security improvements, vulnerability discovery, red teaming, secure-by-default or security-by-design experience, and familiarity with cloud-native architectures, microservices, and distributed systems.
Benefits
- Benefits include wellbeing reimbursement, generous parental leave, adoption assistance, fertility benefits, and additional resources supporting employee wellbeing and work-life balance.
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.