Salesforce develops cloud-based software centered on a customer relationship management platform that brings company data and teams together through an integrated, AI-driven system. Its products support sales, customer service, and marketing workflows, with solutions designed for businesses ranging from small and medium-sized enterprises to larger organizations. Salesforce also provides industry-focused tools, Trailhead learning resources, and AppExchange apps that extend the capabilities of its CRM platform.
Lead Threat Assessment Engineer at Salesforce — San Francisco Onsite
Lead threat assessment engineer at Salesforce focused on securing AI-powered CRM infrastructure and applications. The role combines threat modeling, security telemetry analysis, threat intelligence, and enterprise security improvements.
United States
California
Washington$172,500 – $260,100 / year
On-siteFull-timeSeniorEnglish RequiredEngineerDescription
- Lead threat modeling for infrastructure and application security scenarios
- Evaluate security architecture, system interactions, and new products through an outside-in threat perspective
- Apply threat intelligence, incident response data, detection telemetry, security tooling, and internal risk signals
- Coordinate research and oversee Salesforce’s top threats program
- Review endpoint, network, and security-tool logs to uncover control gaps and bypasses
- Work with executive stakeholders to turn assessments into practical security recommendations
- Lead security improvements arising from incidents with Product and Enterprise Security partners
- Advise Product teams as a subject matter expert during solution design
- Build and coordinate agentic tools that support team analysis and security projects
- Deliver applied threat insights to security and leadership stakeholders with Threat Intelligence partners
- Partner with Cyber Security Operations architects and principals to develop alerts for realized threats
- Mentor junior analysts and engineers
Requirements
- At least eight years of experience in threat modeling and security architecture
- Deep understanding of threat actor tactics and offensive strategies
- Strong research and analytical capabilities
- Experience with the Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and STRIDE
- Working knowledge of application security and OWASP Top 10 vulnerabilities
- In-depth understanding of cloud security and core cloud architecture principles
- Strong knowledge of exploitation and abuse threats across SaaS and PaaS providers
- Proficiency analyzing logs from a range of security tools
- Excellent written and verbal communication skills
- A related technical degree is required
Benefits
- Time-off programs
- Medical insurance
- Dental insurance
- Vision insurance
- Mental health support
- Paid parental leave
- Life insurance
- Disability insurance
- 401(k) retirement plan
- Employee stock purchase program
- Incentive compensation, equity, and benefits may be available for certain roles