Offensive Security Engineer – Red Team

Salesforce

. Design and run end-to-end red team operations simulating real threat actors from initial access to objective completion .

Posted 10/14/2026full-timeUnited StatesMid-LevelSenior💰 $117,200 - $246,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in red team operations, including end-to-end attack simulations and threat actor emulation. Proficient in exploiting vulnerabilities across diverse environments and effectively communicating findings to both technical and executive stakeholders.

Highest-signal resume keywords

Red Team OperationsThreat IntelligenceManual ExploitationAttack ChainingOffensive Security Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingAdversary SimulationCustom Exploit DevelopmentBypassing Security ControlsDocumenting FindingsMalware AnalysisExploit DevelopmentCloud-Native ArchitecturesIdentity-Centric Security ModelsThreat Actor Tactics

Soft Skills

MentoringCommunication

Tools & Technologies

AI ToolsSecurity ControlsDetection Engineering

Certifications & Qualifications

GXPNOSCPOSEPOSWECRTOCRTL

Industry Keywords

Operational SecurityRules of EngagementPurple Team ExercisesEnd-to-End Attack CampaignsRoot Cause Analysis

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Design and run end-to-end red team operations simulating real threat actors from initial access to objective completion
Use threat intelligence to emulate specific Advanced Persistent Threat (APT) groups and adapt tactics as defenders respond
Find, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments
Build custom tooling, payloads, and techniques to test security controls and detections
Partner with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises
Help engineering teams understand root causes and implement durable fixes
Act as the technical escalation point for complex attack paths and disputed findings
Mentor other engineers
Explain attack chains and business risk to executive leadership
Follow rules of engagement, scoping limits, and Operational Security (OPSEC) practices
Test how attackers could abuse AI-driven systems and use AI tools for scoping, documentation, and reporting

Requirements

What you’ll need

3+ years of hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns
Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development
Working knowledge of threat actor tactics, techniques, and procedures (TTPs)
Working knowledge of identity, application, cloud, and hybrid enterprise attack surfaces
Experience bypassing layered security controls and detections
Experience documenting findings and remediation guidance for technical and executive audiences
Published security research such as CVE credits, blog posts, or conference talks is advantageous
Experience with assumed-breach or long-running adversary emulation campaigns is advantageous
Experience collaborating with Detection and Response or purple team functions is advantageous
Malware analysis or exploit development background is advantageous
Familiarity with cloud-native architectures and identity-centric security models is advantageous
Offensive security certifications such as GXPN, OSCP, OSEP, OSWE, CRTO, or CRTL are advantageous

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Hybrid work arrangement