Penetration Testing Engineer, Salesforce

• You have 2-4 years of hands-on experience in penetration testing, offensive security, or application security testing
• You have experience performing penetration testing engagements in production or production-like environments, using manual techniques and automation/AI tools
• You understand application security vulnerabilities and attack chains, identity and access control failures, cloud security fundamentals, and security risks specific to AI and LLM-based systems
• You can clearly articulate exploitation mechanics, impact, and practical remediation steps to engineers and security teams

Desirable

• We are looking for a Penetration Testing Engineer to execute deep, hands-on penetration tests across our applications, platforms, cloud infrastructure, and AI-powered systems. You'll bring a hacker mindset to real exploitation and attack chaining rather than checklist-driven testing, working under the guidance of senior team members on complex engagements
• You'll partner with engineering and AppSec teams to turn findings into concrete remediation, while building your skills across cloud, identity, and AI/ML attack surfaces
• Execute penetration tests across web applications, APIs, cloud/hybrid infrastructure (Kubernetes, Docker), identity and trust boundaries, and AI/ML-enabled systems, including prompt injection and abuse of AI integrations
• Perform manual exploitation beyond automated tooling, including business logic abuse, privilege escalation, and identity/access trust relationship abuse
• Support engagements through scoping, execution, risk assessment, and clear reporting with remediation guidance
• Produce technically detailed reports covering exploitation paths, missing security controls, and mitigation recommendations, and collaborate with engineering, AppSec, and Detection & Response teams on findings