Principal Security Researcher
Salesforce1 day ago
Tel Aviv-Yafo, IsraelStaff+
Responsibilities
- Lead advanced penetration testing, red team operations, and security research across cloud infrastructure, applications, and services.
- Build custom tools, exploits, and attack techniques that simulate real-world adversaries.
- Partner with product teams to translate offensive security findings into remediation and stronger secure design practices.
- Mentor team members and present findings to technical and executive audiences.
- Drive improvements in Salesforce’s offensive security capabilities and tradecraft.
Requirements
- 10+ years of hands-on offensive security experience with deep expertise in penetration testing, red teaming, application security research, or vulnerability discovery.
- Experience identifying and exploiting complex vulnerabilities in web applications, APIs, cloud environments, or infrastructure.
- Strong programming or scripting skills in Python, Go, Bash, or PowerShell for tooling and automation.
- Solid knowledge of MITRE ATT&CK and vulnerability classes such as OWASP and CWE.
- Degree or equivalent relevant experience is required.
- Preferred qualifications include cloud security experience with AWS, GCP, or Azure; container experience with Kubernetes or Docker; CVE discoveries; security tooling; CI/CD or supply chain security; security community participation; and certifications such as OSCP, OSCE, OSWE, or GXPN.
Benefits
- Salesforce provides benefits and resources intended to support balance and employee well-being.
- The role is based in Israel.
- Salesforce offers reasonable accommodation during the application and recruiting process.
Tech Stack
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.