{"id":2000478,"url":"https://alion.io/job/salesforce-offensive-security-researcher","title":"Offensive Security Researcher","company":{"id":70,"name":"Salesforce","domain":"salesforce.com","url":"https://alion.io/company/salesforce","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":384,"ghost_share":0.01,"stale_share":0.586,"repost_share":0.049,"time_to_fill_p50_days":22,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":87000,"max_usd":209000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":528},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentforce","optional":false},{"name":"AI Agents","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-10-07T11:18:15Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-11T02:28:08Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.\nJob Category\nProductJob Details\nAbout Salesforce\nSalesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword - it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.\nReady to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.\nWe are looking for an Offensive Security Researcher with an attacker mindset to discover, analyze, and remediate security vulnerabilities across our products and platforms.\nThis role focuses on identifying root causes, architectural weaknesses, and recurring security anti-patterns, and implementing secure-by-default solutions that prevent vulnerabilities.\nYou will work alongside engineering teams to analyze design decisions, improve security posture, and support overall application security maturity.\nKey Responsibilities\nConduct offensive security assessments (manual testing, code review, architectural analysis, threat modeling) across application ecosystems.\nIdentify critical, high-impact, and systemic vulnerabilities alongside isolated issues.\nPerform security research to identify emerging attack vectors, abuse cases, and bypass techniques relevant to our applications and platforms.\nPartner closely with software engineers, tech leads, and architects to:Explain risk, impact, and exploitability.\nDesign and implement effective remediations.\nEnsure fixes are scalable, maintainable, and aligned with engineering realities.\n\nExecute Secure by Default initiatives by:Applying security guardrails, patterns, and baseline controls.\nRemediating insecure defaults and unsafe configurations.\nPreventing vulnerabilities through platform-level and framework-level updates.\n\nReview application and platform designs early in the development lifecycle to prevent vulnerabilities before release.\nApply security standards, best practices, and architectural guidance during application development.\nShare security knowledge and offensive techniques with engineering teams.\nCollaborate with detection, monitoring, and incident response teams to improve visibility into real-world exploitation.\nRequired Qualifications\n3+ years of experience in Application Security or Offensive Security with an attacker mindset.\nDemonstrated experience finding and remediating vulnerabilities in complex applications.\nStrong understanding of:Web application security (OWASP Top 10 and beyond)\nAuthentication & authorization flaws\nAPI security\nInjection attacks, logic flaws, and access control bypasses\nSecure design and threat modeling\n\nHands-on experience with manual security testing (beyond automated tools).\nAbility to translate complex security findings into clear, actionable guidance for engineers.\nStrong communication and collaboration skills with engineering teams.\nPreferred Qualifications\nPublished security research or CVEs (technical blogs, advisories, whitepapers, or conference presentations).\nExperience implementing platform-level or framework-level security improvements.\nBackground in vulnerability discovery, security research, or red teaming.\nExperience implementing Secure by Default or security-by-design concepts.\nFamiliarity with cloud-native architectures, microservices, and distributed systems.\nAbility to balance security requirements with product velocity and developer experience.\nBenefits & Perks\nCheck out our benefits site which explains our various benefits, including wellbeing reimbursement, generous parental leave, adoption assistance, fertility benefits, and more.\nUnleash Your Potential\nWhen you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance andbe your best, and our AI agents accelerate your impact so you cando your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future - but to redefine what’s possible - for yourself, for AI, and the world.\nAccommodations\nIf you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.\nPlease note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.\nPosting Statement\nSalesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications - without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.","description_format":"text","description_chars":6368,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Marketing Automation","AI Agents","Team Communication & Collaboration"],"lifecycle":[{"event":"open","at":"2026-10-07T11:18:15Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":22,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/salesforce-offensive-security-researcher","json_url":"https://alion.io/job/salesforce-offensive-security-researcher.json","meta":{"generated_at":"2026-10-11T03:07:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":498,"day_limit":5000,"remaining_today":4502,"minute_limit":60,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":70},"rest":"https://alion.io/mcp/rest/get_company?id=70"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsalesforce-offensive-security-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsalesforce-offensive-security-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsalesforce-offensive-security-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/salesforce-offensive-security-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsalesforce-offensive-security-researcher"}]}