Penetration Testing Engineer, MTS

🕒 September 30

🏄 California, Virginia, +1 more states – Remote

🏄 California – Remote ⚔️ Virginia – Remote ☕ Washington – Remote

💵 $117.2k - $176.7k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔧 QA Engineer (Quality Assurance)

🚫👨‍🎓 No degree required

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 3%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Salesforce

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1999

💼 Consulting

📣 Marketing

☁️ SaaS

Consulting • Marketing • SaaS

Salesforce is a leading cloud-based software company that provides a comprehensive customer relationship management (CRM) platform. The platform connects all company data and teams on an integrated, AI-driven system to improve sales, customer service, and marketing efforts. Salesforce offers scalable solutions for businesses of all sizes, including small and medium enterprises, and provides industry-specific solutions to modernize operations, save time, and reduce costs. Salesforce also offers educational resources through Trailhead and a wide selection of apps on AppExchange to extend its CRM capabilities.

📋 Description

• Execute penetration tests across web applications, APIs, cloud/hybrid infrastructure including Kubernetes and Docker, identity and trust boundaries, and AI/ML-enabled systems • Test AI/ML systems for prompt injection and abuse of AI integrations • Perform manual exploitation beyond automated tooling, including business logic abuse, privilege escalation, and identity/access trust relationship abuse • Support engagements through scoping, execution, risk assessment, and clear reporting with remediation guidance • Produce technically detailed reports covering exploitation paths, missing security controls, and mitigation recommendations • Collaborate with engineering, AppSec, and Detection & Response teams on findings • Work under the guidance of senior team members on complex engagements • Build skills across cloud, identity, and AI/ML attack surfaces

🎯 Requirements

• 2-4 years of hands-on experience in penetration testing, offensive security, or application security testing • Experience performing penetration testing engagements in production or production-like environments • Experience using manual techniques and automation/AI tools • Understanding of application security vulnerabilities and attack chains • Understanding of identity and access control failures • Understanding of cloud security fundamentals • Understanding of security risks specific to AI and LLM-based systems • Ability to clearly articulate exploitation mechanics, impact, and practical remediation steps to engineers and security teams • Experience with custom scripts, payloads, or proof-of-concept development is a plus • Participation in Bug Bounty programs is a plus • Familiarity with cloud architectures and identity-centric security models is a plus • Experience using AI/LLMs for offensive security work or vulnerability discovery is a plus

🏖️ Benefits

• Time off programs • Medical insurance • Dental insurance • Vision insurance • Mental health support • Paid parental leave • Life insurance • Disability insurance • 401(k) • Employee stock purchasing program • Incentive compensation may be available for certain roles • Equity may be available for certain roles • Reasonable accommodations during the application or recruiting process

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume