Product Security Engineer, Senior
Salesforce2 days ago
Base Salary
$149k - $246k/yr
Responsibilities
- Provide expert security advisory for large-scale cloud initiatives and enterprise application and infrastructure architectures.
- Conduct security architecture reviews and threat modeling, identify vulnerabilities, and develop risk mitigation plans throughout the software development lifecycle.
- Partner with product and engineering teams to recommend secure design and implementation solutions.
- Work with Product Business Information Security Officers to prioritize risk-based security initiatives and shape security roadmaps using risk signals and emerging threats.
- Serve as a primary security contact for engineering partners and leadership and influence teams toward secure outcomes without direct organizational authority.
Requirements
- 5–8 years of experience in security engineering, security architecture, or security assurance.
- Experience securing products and infrastructure in one or more public cloud environments, including knowledge of cloud service models, shared responsibility boundaries, and identity primitives at scale.
- Experience with structured security design reviews, threat modeling, OWASP Top 10, CWE Top 25, and communicating security risk to technical and non-technical audiences.
- Understanding of authentication and authorization patterns including OAuth, OIDC, SAML, service-to-service authentication, and API authorization models.
- Understanding of TCP/IP, TLS, network segmentation, key management, certificate lifecycles, secrets handling, and encryption standards.
- Strong written and verbal communication skills.
- Preferred experience with abuse cases, attack paths, penetration testing methodologies, offensive security, secure development lifecycle programs, security review processes, or security advisory programs.
- Preferred ability to read and reason about Java, Go, or Python code and familiarity with Kubernetes, Docker, Istio, PKI tooling, CSPM, vulnerability scanning, SAST, or infrastructure-as-code security scanning.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- The role is located in San Francisco, California, or Bellevue, Washington.
- The stated base salary range is $148,500–$223,900 annually, or $178,900–$246,000 annually in select San Francisco and New York City metropolitan area locations; bonus, equity, and benefits are excluded from these ranges.
Tech Stack
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.