Lead Product Security Engineer
Salesforce1 day ago
Dublin, IrelandStaff+
Responsibilities
- Build secure development practices into the full software lifecycle for assigned product areas.
- Lead threat modeling and architecture reviews for data platforms, AI integrations, and public-sector deployments.
- Review source code using manual and automated methods across languages such as Java, C, and C++.
- Advise engineering teams on identity, access control, cloud configuration, and security risk.
- Translate complex vulnerabilities into business risk for engineering leaders and recommend delaying launches when critical security requirements are unmet.
- Guide the security plan for a platform rebuild while the legacy environment is retired.
Requirements
- 7+ years of experience in product security, application security, or security architecture securing enterprise cloud platforms.
- Working knowledge of at least two programming languages, such as Java, C, or C++, and experience reviewing complex code for security flaws.
- Knowledge of application, cloud, and data security and expertise in the OWASP Top 10, SANS Top 25, and modern static and dynamic code-scanning tools.
- Ability to communicate complex vulnerabilities as understandable business risks.
- A degree or equivalent relevant experience is required.
- Preferred qualifications include mergers and acquisitions security experience, offensive or cloud security certification, web application penetration testing, bug bounty participation, open-source security contributions or research, and Salesforce ecosystem knowledge.
Benefits
- Salesforce offers benefits and resources intended to support balance and employee well-being.
- The role is based in Dublin, Ireland.
- Salesforce provides reasonable accommodations during the application and recruiting process.
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.