Senior Offensive Security Researcher

Salesforce

. Lead offensive security assessments, including manual testing, code review, architectural analysis, and threat modeling, across application ecosystems .

Posted 11/2/2026full-timeUnited StatesSenior💰 $148,500 - $223,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Application Security and Offensive Security, with a strong focus on identifying and remediating vulnerabilities in complex applications. Proficient in translating security findings into actionable guidance while collaborating effectively with engineering teams.

Highest-signal resume keywords

Application SecurityOffensive SecurityWeb Application SecurityThreat ModelingVulnerability Remediation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Manual Security TestingInjection AttacksAuthentication FlawsAuthorization FlawsAPI SecurityAccess Control BypassesSecure DesignSecurity ResearchRed TeamingSecure by Default

Soft Skills

Strong CommunicationCollaboration SkillsMentoring

Tools & Technologies

Cloud-Native ArchitecturesMicroservicesDistributed Systems

Industry Keywords

OWASP Top 10Security StandardsArchitectural GuidanceSecurity GuardrailsBaseline Controls

Tech Stack

Tools & technologies

CloudDistributed SystemsMicroservices

About the role

Key responsibilities & impact

Lead offensive security assessments, including manual testing, code review, architectural analysis, and threat modeling, across application ecosystems
Identify critical, high-impact, systemic vulnerabilities and isolated issues
Conduct security research into emerging attack vectors, abuse cases, and bypass techniques
Partner with software engineers, tech leads, and architects to explain risk, impact, and exploitability
Design and implement effective remediations
Ensure fixes are scalable, maintainable, and aligned with engineering realities
Lead Secure by Default initiatives using security guardrails, patterns, and baseline controls
Remediate insecure defaults and unsafe configurations
Prevent vulnerabilities through platform-level and framework-level updates
Influence application and platform designs early in the development lifecycle
Set and apply security standards, best practices, and architectural guidance
Mentor engineers and peers by sharing security knowledge and offensive techniques
Collaborate with detection, monitoring, and incident response teams to improve visibility into real-world exploitation

Requirements

What you’ll need

7+ years of experience in Application Security or Offensive Security with an attacker mindset
Demonstrated experience independently finding and remediating vulnerabilities in complex applications
Deep understanding of web application security (OWASP Top 10 and beyond)
Deep understanding of authentication and authorization flaws
Deep understanding of API security
Deep understanding of injection attacks, logic flaws, and access control bypasses
Deep understanding of secure design and threat modeling
Hands-on experience with manual security testing beyond automated tools
Ability to translate complex security findings into clear, actionable guidance for engineers and technical leadership
Strong communication and collaboration skills, with a track record of influencing engineering teams
Published security research or CVEs (technical blogs, advisories, whitepapers, or conference presentations) is an additional qualification
Experience implementing platform-level or framework-level security improvements is an additional qualification
Background in vulnerability discovery, security research, or red teaming is an additional qualification
Experience implementing Secure by Default or security-by-design concepts is an additional qualification
Familiarity with cloud-native architectures, microservices, and distributed systems is an additional qualification
Ability to balance security requirements with product velocity and developer experience is an additional qualification

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Certain roles may be eligible for incentive compensation
Certain roles may be eligible for equity
Reasonable accommodation during the application or recruiting process