Skip to content
Level

Salesforce

Senior Offensive AI Security Researcher

Salesforce is hiring a Senior Offensive AI Security Researcher in Tel Aviv, Israel. Level rates it ; you can apply on Salesforce.

Level's read on this job

  • Builds AI ●●●● is how Level rates this cybersecurity role: the job is building AI systems.
  • The posting mentions LangChain, Hugging Face and PyTorch among its tools and skills.
  • Level classes it as a senior role.
  • Salesforce has 1,500+ other open roles on Level.

AI in this role

Lead advanced offensive security research to uncover vulnerabilities and threat vectors across Salesforce's AI ecosystem.

langchainhugging-facepytorch
ragai-agentsoffensive-securityadversarial-researchprompt-injectionthreat-modelingvulnerability-assessment

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Product

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Note: By applying to the Software Development posting, recruiters and hiring managers across the organization hiring Software Engineers will review your resume. Our goal is for you to apply once and have your resume reviewed by multiple hiring teams.

We are looking for a Senior Offensive AI Security Researcher with a strong offensive security and research mindset to lead novel adversarial research across Salesforce's AI ecosystem - uncovering critical and systemic vulnerabilities before they can be exploited.

This role goes beyond finding individual bugs - it focuses on scoping, designing, and executing advanced research into emerging AI threat vectors, combining academic research with practical offensive methodologies to establish new TTPs targeting complex AI paradigms, including indirect prompt injection, tool abuse/excessive agency, RAG system poisoning, data extraction, and model/data supply chain compromises.

You will work as a trusted partner to engineering and architecture teams - providing an offensive security perspective that shapes internal threat models, guides AI architecture decisions, supports corporate governance, and directly contributes to Salesforce's Generative AI Security Standard.

Key Responsibilities:

  • Lead Novel AI Security Research: Scope, design, and execute advanced adversarial research across Salesforce's AI ecosystem, applying a risk-based approach to uncover novel threat vectors before exploitation.

  • Innovate & Operationalize AI Attack Techniques: Combine academic research with practical offensive methodologies to establish new TTPs targeting complex AI paradigms- specifically indirect prompt injection, tool abuse/excessive agency, RAG system poisoning, data extraction, and model/data supply chain compromises.

  • Guide Strategy & Security Standards: Provide an offensive security perspective to guide AI architecture, shape internal threat models, support corporate governance, and directly contribute to Salesforce's Generative AI Security Standard.

  • Disseminate Research: Publish internal and external threat intelligence, vulnerability analyses, and security research to keep Salesforce defenses aligned with state-of-the-art AI threat landscapes.

Required Qualifications:

  • 5+ years of experience in offensive security roles (vulnerability research, penetration testing, application security, or security engineering).

  • 2+ years of hands-on experience auditing, breaking, or researching ML/AI systems, with deep expertise in LLM attack surfaces and frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS).

  • Deep technical understanding of modern AI design patterns, including Retrieval-Augmented Generation (RAG), autonomous agentic workflows, model context protocols, and AI pipelines.

  • High degree of proficiency in Python for exploit proof-of-concept development, data analysis, and technical evaluation.

  • Proven track record of leading complex security initiatives and communicating critical, high-stakes technical risks to both research engineers and executive leadership.

Preferred Qualifications:

  • Advanced degree (MS or PhD) in Computer Science, Machine Learning, Cybersecurity, or a related field.

  • A public portfolio of offensive security research, including conference presentations (e.g., Black Hat, DEF CON, NeurIPS), published papers, CVEs, advisories, or open-source research contributions.

  • Experience auditing modern AI development ecosystems and tools (e.g., PyTorch, Hugging Face, LangChain, vector databases, or open-weight models).

Benefits & Perks

Check out our benefits site which explains our various benefits, including wellbeing reimbursement, generous parental leave, adoption assistance, fertility benefits, and more.

Salesforce Information

Check out our Salesforce Engineering Site.

Unleash Your Potential

When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.

Accommodations

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.

Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

How we rate this

Senior Offensive AI Security Researcher at Salesforce rates 85 out of 100 for how much of the daily work is AI. That makes it Builds AI (AI Level 4 of 4). The level is about AI in the job, not seniority.

Classification

Builds AI. The job is building AI systems.

  1. ●●●● Builds AI80 to 100
  2. ●●●○ Works on AI60 to 79
  3. ●●○○ Uses AI40 to 59
  4. ●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

RAGAI agentsOffensive SecurityAdversarial ResearchPrompt InjectionThreat ModelingVulnerability AssessmentLangChain

Also common in cybersecurity jobs at this level

Pay

Typical cybersecurity job
$159k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

  1. How would you design a retrieval step so the model answers from real data instead of guessing?
  2. How do you decide when an AI agent can act on its own versus asking for approval first?
  3. Tell me about a project where offensive security was part of your work. What did you do?
  4. Tell me about a project where adversarial research was part of your work. What did you do?
  5. Tell me about a project where prompt injection was part of your work. What did you do?

Adapt your resume

  • List these exact terms on your resume: RAG, AI agents, Offensive Security, Adversarial Research, and Prompt Injection. An applicant tracking system matches the wording, not the idea.
  • Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
  • Lead with what you built, trained or shipped. This role is judged on the AI system itself, not the tools around it.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. You get your review by email within 24 hours.

Get new cybersecurity jobs (Builds AI ●●●●) by email

One email a week with the new cybersecurity jobs (Builds AI ●●●●), each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.

Free. One email a week. Unsubscribe in one click.

Similar roles

Security roles that build AI, at other companies.

What kind of AI work fits you?

Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.

Find my next step

More jobs at Salesforce

More cybersecurity jobs

Related searches

Same AI level

Jobs by city