Lead Product Security Engineer
Salesforce2 days ago
Tel Aviv-Yafo, IsraelStaff+
Responsibilities
- Build repeatable secure development practices into the full software lifecycle for assigned product areas.
- Lead threat modeling and architecture reviews for data platforms, AI integrations, and public-sector deployments.
- Perform manual and automated source-code security reviews across Java, C, and C++ codebases.
- Advise teams on identity, access control, cloud configuration, and remediation of security flaws.
- Translate vulnerabilities into business risk for engineering leaders and guide security plans for platform rebuilds and legacy-system retirement.
- Recommend delaying launches when critical security requirements are not met.
Requirements
- 7+ years of experience in product security, application security, or security architecture securing enterprise cloud platforms.
- Working knowledge of at least two programming languages, such as Java, C, or C++, and experience reviewing complex code for security flaws.
- Expertise in application, cloud, and data security, including the OWASP Top 10, SANS Top 25, and modern static and dynamic code-scanning tools.
- Ability to communicate complex vulnerabilities as clear business risks and openness to using AI tools for security assessments.
- A degree or equivalent relevant experience is required.
- Preferred qualifications include mergers and acquisitions security experience, offensive or cloud security certification, web application penetration testing, bug bounty participation, open-source security contributions, or Salesforce ecosystem knowledge.
Benefits
- Salesforce provides benefits and resources intended to support balance and employee well-being.
- Salesforce uses AI tools in recruiting assessment while retaining human hiring decisions.
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.