Principal Security Researcher

Salesforce
Tel Aviv
Workplace: OnsiteFull timeFunction: Research & Scientific (R&D)Experience: 10+ yearsSkills: ["Mentorship","Communication","Collaboration","Attacker mindset","Technical presentation"]

Drive offensive security research for Salesforce by leading penetration testing, red team operations, and security investigations across cloud infrastructure, applications, and services. Build custom tools, exploits, and attack techniques to simulate real adversaries, then translate offensive findings into actionable remediation and stronger secure design practices with product teams. Mentor teammates and present results to technical and executive audiences to scale the team’s offensive security capability.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Salesforce
Salesforce
1 day ago

Principal Security Researcher

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 14 hours agoStatus: Live

Job Summary

Drive offensive security research for Salesforce by leading penetration testing, red team operations, and security investigations across cloud infrastructure, applications, and services. Build custom tools, exploits, and attack techniques to simulate real adversaries, then translate offensive findings into actionable remediation and stronger secure design practices with product teams. Mentor teammates and present results to technical and executive audiences to scale the team’s offensive security capability.
Location: Tel Aviv
Workplace: Onsite
Employment Type: Full time
Job Function: Research & Scientific (R&D)
Seniority: Sr. Manager level

Key Responsibilities

  • •Lead advanced penetration testing, red team operations, or security research against Salesforce cloud infrastructure, applications, and services.
  • •Build custom tools, exploits, and attack techniques to simulate real-world adversaries.
  • •Partner with product teams to translate offensive findings into remediation and stronger secure design practices.
  • •Mentor team members and present findings to technical and executive audiences to grow offensive security capability.

Key Requirements

  • •10+ years of hands-on offensive security experience, including deep expertise in at least one of penetration testing, red teaming, application security research, or vulnerability discovery.
  • •Experience identifying and exploiting complex vulnerabilities in web applications, APIs, cloud environments, or infrastructure.
  • •Strong programming/scripting skills for tooling and automation, such as Python, Go, Bash, or PowerShell.
  • •Strong grasp of attack frameworks (MITRE ATT&CK) and vulnerability classes (OWASP, CWE).
  • •Degree or equivalent relevant experience required; experience will be evaluated based on core competencies for the role.
Experience:10+ yearsOffensive securityPenetration testingRed teamingCloud securityApplication securityWeb security
Skills:MentorshipCommunicationCollaborationAttacker mindsetTechnical presentation
Certifications:OSCPOSCEOSWEGXPN
Tech Stack:PythonGoBashPowerShellMITRE ATT&CKOWASPCWEAWSGCPAzureKubernetesDockerCVECI/CDSupply chain security

Company Brief

Salesforce
Provides a leading cloud-based customer relationship management (CRM) platform with sales, service, marketing, analytics, and integration tools that empower businesses to manage customer relationships and digital transformation at scale.
Industry: SaaS
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 1999
Glassdoor
Glassdoor: 4.1
WebsiteLinkedInGlassdoor