Offensive Security Engineer (Red Team)

Join our Red Team as an Offensive Security Engineer, where you will simulate real attackers across Salesforce products, platforms, and enterprise environments. You will design and run end-to-end red team operations, find and exploit weaknesses, and work with various teams on campaign design and exercises. You will also act as a technical escalation point and mentor other engineers.

• Concevoir et exécuter des opérations de red teaming de bout en bout qui simulent des acteurs de menace réels, en utilisant des renseignements sur les menaces pour émuler des groupes de menaces persistantes avancées (APT).
• Trouver, exploiter et enchaîner les faiblesses à travers les applications, l'identité, le cloud et les environnements d'entreprise, et construire des outils, des charges utiles et des techniques personnalisés.
• Agir en tant que point d'escalade technique pour des chemins d'attaque complexes et des résultats contestés, et encadrer d'autres ingénieurs.

• Working knowledge of threat actor tactics, techniques, and procedures (TTPs) and of identity, application, cloud, and hybrid enterprise attack surfaces
• 3+ years of hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns
• Experience bypassing layered security controls and detections, and documenting findings and remediation guidance for technical and executive audiences
• Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development
• Published security research, such as Common Vulnerabilities and Exposures (CVE) credits, blog posts, or conference talks
• Malware analysis or exploit development background, and familiarity with cloud-native architectures and identity-centric security models
• Experience with assumed-breach or long-running adversary emulation campaigns, and collaboration with Detection and Response or purple team functions
• Offensive security certifications such as GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), Offensive Security Certified Professional (OSCP), Offensive Security Experienced Penetration Tester (OSEP), Offensive Security Web Expert (OSWE), Certified Red Team Operator (CRTO), or Certified Red Team Lead (CRTL)