Drimva

Salesforce

Penetration Testing Engineer, MTS

$117K–$194K

California - San Francisco +2 · Office Tech-Flexible · Full-time · Posted Oct 14, 2026

Location
California - San Francisco
Virginia - Herndon
Washington - Bellevue
Experience
2-4 years.

About the job

Executes hands-on penetration tests across applications, cloud infrastructure, identity boundaries, and AI-enabled systems, then works with teams to remediate vulnerabilities.

What you'll do

  • Test applications, APIs, cloud and hybrid infrastructure, identity boundaries, and AI/ML systems using manual exploitation and automation.
  • Support engagement scoping, execution, risk assessment, reporting, and remediation guidance.
  • Document exploitation paths and security gaps, and collaborate with engineering, AppSec, and Detection & Response teams.

What they ask for

  • 2-4 years of hands-on experience in penetration testing, offensive security, or application security testing.
  • Experience conducting penetration tests in production or production-like environments using manual techniques and automation/AI tools.
  • Understanding of application vulnerabilities and attack chains, identity and access control failures, cloud security fundamentals, and risks in AI/LLM-based systems.
  • Ability to explain exploitation mechanics, impact, and practical remediation to engineers and security teams.

Nice to have

  • Custom scripts, payloads, or proof-of-concept development; participation in Bug Bounty programs.
  • Familiarity with cloud architectures and identity-centric security models; experience using AI/LLMs for offensive security or vulnerability discovery.

Pay

USD $117,200 - $176,700 annually base salary; USD $141,200 - $194,200 annually base salary

Tools

Kubernetes, Docker, AI/ML, LLM

AI focus

Penetration testing of AI/ML-enabled systems, including prompt injection and abuse of AI integrations; AI/LLM tools may also support offensive security work or vulnerability discovery.

Model-written summary · the original posting is authoritative

First seen Oct 10, 2026 · Last verified Nov 4, 2026 (UTC)