Lead / Senior Offensive Security Engineer (Offsec AI Team)
Salary not listed • Israel - Tel Aviv • Full-time
Posted 17d ago
Remote Work Policy
On-site
Employment Type
Full-time
Categories
AI Engineer
About the job
Salesforce is seeking a Lead or Senior Offensive Security Engineer to join their Offensive Security Automation team. This role involves performing security assessments and vulnerability research, with a strong focus on designing and developing AI automation and autonomous harnesses using frontier models. The ideal candidate will combine deep security expertise with the ability to direct and improve AI-driven tooling to perform offensive security testing at scale.
Responsibilities
- Perform security assessments and vulnerability research across web applications, APIs, and cloud/hybrid infrastructure using internal AI tools and frontier models.
- Develop AI automation and autonomous harnesses to direct frontier models for continuous and large-scale offensive security testing.
- Design agent-based workflows for reasoning over data, planning for risk signals, and executing multi-step offensive testing.
- Ensure internal solutions can perform advanced exploitation techniques beyond automated tooling.
- Run end-to-end security engagements, including scoping, execution, reporting, and remediation guidance.
- Discover systemic/architectural weaknesses and drive secure-by-default fixes.
- Partner with engineering, security architecture, and detection & response teams to address root causes and validate controls.
- Produce high-quality technical reports with clear exploitation paths and prioritized remediation.
- Establish human-in-the-loop checkpoints to scale offensive coverage safely and precisely.
- Translate offensive security tradecraft into reusable, explainable automation.
Requirements
- 6+ years (Senior) / 8+ years (Lead) hands-on offensive security experience (pentesting, red teaming, app/security research) with proven complex engagement delivery.
- Deep vulnerability knowledge in cloud and web application security (OWASP Top 10+, identity/authz attack vectors, cloud/hybrid attack surfaces).
- Hands-on experience using internal AI tools and frontier models for security testing.
- Software engineering fundamentals including system design, API integration, and working with distributed services.
- Ability to write custom scripts/tooling/payloads and contribute to building automation and autonomous harnesses.
- Proficiency in prompt engineering.
- Excellent written and verbal communication skills.