Offensive Security Engineer - Red Team

What you'll do

• Design and execute adversary simulations, using threat intelligence to emulate threat actors and adapt to defenders’ responses.
• Find and chain vulnerabilities across application, identity, cloud, and enterprise environments; develop custom tooling, payloads, and techniques.
• Partner with security and engineering teams on campaign design, purple team exercises, remediation, and communicating findings; mentor engineers.

What they ask for

• 3+ years of hands-on experience in red teaming, penetration testing, or adversary simulation, including end-to-end attack campaigns.
• Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development.
• Working knowledge of threat actor TTPs and identity, application, cloud, and hybrid enterprise attack surfaces.
• Experience bypassing layered security controls and detections, and documenting findings and remediation guidance for technical and executive audiences.

Nice to have

• Published security research; assumed-breach or long-running adversary emulation campaigns; collaboration with Detection and Response or purple team functions.
• Malware analysis or exploit development background; familiarity with cloud-native architectures and identity-centric security models; offensive security certifications listed in the posting.

Pay

$117,200 - $223,900 annually (base salary); $141,200 - $246,000 annually (base salary)

Tools

Agentforce

AI focus

Test how attackers could abuse AI-driven systems and use AI tools to accelerate scoping, documentation, and reporting.