Product Security Lead
Salesforce1 day ago
Bellevue, WA, USA or San Francisco, CA, USASenior / Staff+
H1B sponsor
Base Salary
$173k - $286k/yr
Responsibilities
- Provide expert security advisory support for large-scale cloud initiatives and enterprise application and infrastructure architectures.
- Conduct security architecture reviews and threat modeling to identify vulnerabilities and develop risk mitigation plans throughout the software development lifecycle.
- Partner with product and engineering teams to recommend secure designs that balance functional objectives with security requirements.
- Work with Product Business Information Security Officers to prioritize risk-based security initiatives and shape security roadmaps using risk signals and emerging threats.
- Serve as a primary security contact for engineering partners and leadership and influence secure outcomes without direct organizational authority.
Requirements
- 8–10 years of experience in security engineering, security architecture, or security assurance.
- Experience securing products and infrastructure in one or more public cloud environments, including understanding cloud service models, shared responsibility boundaries, and identity primitives at scale.
- Experience with structured security design reviews, threat modeling, vulnerability classes including OWASP Top 10 and CWE Top 25, and communicating risk to technical and non-technical audiences.
- Knowledge of authentication and authorization patterns including OAuth, OIDC, SAML, service-to-service authentication, API authorization, TCP/IP, TLS, network segmentation, key management, certificate lifecycles, secrets handling, and encryption standards.
- Strong written and verbal communication skills and the ability to influence engineering teams toward secure outcomes.
- Preferred: familiarity with abuse cases, attack paths, penetration testing methodologies, or offensive security techniques.
- Preferred: experience improving secure development lifecycles, security review processes, or security advisory programs.
- Preferred: ability to analyze structured data and identify root-cause mitigations across broad service portfolios.
- Preferred: ability to read and reason about Java, Go, or Python code and familiarity with Kubernetes, Docker, Istio, PKI tooling, CSPM, vulnerability scanning, SAST, or infrastructure-as-code security scanning.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- The role is located in San Francisco, California, or Bellevue, Washington.
- Base salary is supplemented separately by potentially applicable incentive compensation, equity, and benefits.
Tech Stack
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.