Product Security Lead
InformaticaResponsibilities
- Lead security architecture and design reviews, code reviews, and threat modeling for Cloud features and services.
- Drive remediation of vulnerabilities identified through penetration tests, bug bounty programs, and ASA findings.
- Own security SLAs and risk acceptance while designing controls for authentication and authorization weaknesses, storefront abuse, credential stuffing, bot traffic, and API abuse.
- Advise on multi-tenant isolation, authentication and authorization, secrets and key management, and PCI-relevant payment flows.
- Partner with Detection & Response on product-context security and serve as an escalation point for security incidents and customer security questions.
- Brief leadership on risk posture and develop short- and long-term remediation plans.
- Influence security roadmaps across Commerce and Trust while mentoring engineers and security champions.
- Improve secure software development lifecycle practices and develop security tooling.
Requirements
- 7+ years of experience in application, product, or cloud security.
- Deep knowledge of web and API security, including OWASP, OAuth/OIDC, and SSO.
- Experience securing e-commerce and SaaS platforms, payments, and headless/storefront architectures.
- Experience reviewing multi-tenant SaaS platforms and enforcing tenant or organizational data isolation.
- Familiarity with secure software supply-chain practices, dependency analysis, artifact provenance, build systems, and vulnerability-management workflows.
- Strong threat-modeling and secure-code-review skills.
- Fluency in Java, JavaScript, and Node ecosystems.
- Experience securing public-cloud infrastructure involving AWS, Hyperforce, Kubernetes, or GCP, plus familiarity with logging and detection pipelines.
- Experience securing AI-enabled product features, including prompt and tool boundaries, data access, agent authorization, and indirect prompt-injection risks.
- Ability to influence senior engineers and leaders without direct authority and communicate risk clearly.
- History of responsible vulnerability research or security tooling development.
- Preferred qualifications include commerce-platform, bot-mitigation, or fraud-and-abuse-prevention experience; CISSP, GIAC, or OSCP certifications; bug-bounty program experience; and security-community presentations, publications, or contributions.
Benefits
- Salesforce states that its benefits and resources support work-life balance and employee well-being.
- Salesforce provides reasonable accommodations during the application and recruiting process.
Categories
About Informatica
Informatica (NYSE: INFA), a leader in AI-powered enterprise cloud data management, helps businesses unlock the full value of their data and AI. As data grows in complexity and volume, Informatica’s Intelligent Data Management Cloud™ delivers a complete, end-to-end platform with a suite of industry-leading, integrated solutions to connect, manage and unify data across any cloud, hybrid or multi-cloud environment. Powered by CLAIRE® AI, Informatica’s platform integrates natively with all major cloud providers, data warehouses and analytics tools— giving organizations the freedom of choice, avoiding vendor lock-in and delivering better ROI by enabling access to governed data, simplifying operations and scaling with confidence. Trusted by approximately 5,000 customers in nearly 100 countries—including over 80 of the Fortune 100—Informatica is the backbone of platform-agnostic, cloud data-driven transformation. Informatica. Where data and AI come to life.™ Contact: PR@informatica.com