Salesforce dezvoltă software bazat pe cloud, centrat pe o platformă de gestionare a relațiilor cu clienții, care conectează datele companiei și echipele printr-un sistem integrat, bazat pe inteligență artificială. Produsele sale susțin procesele de vânzări, servicii pentru clienți și marketing, oferind soluții concepute atât pentru întreprinderi mici și mijlocii, cât și pentru organizații mai mari. Salesforce oferă, de asemenea, instrumente dedicate anumitor industrii, resurse de învățare prin Trailhead și aplicații în AppExchange care extind funcționalitățile platformei sale CRM.
Lead Threat Assessment Engineer at Salesforce — San Francisco Onsite
Lead threat assessment engineer at Salesforce focused on securing AI-powered CRM infrastructure and applications. The role combines threat modeling, security telemetry analysis, threat intelligence, and enterprise security improvements.
Descriere
- Lead threat modeling for infrastructure and application security scenarios
- Evaluate security architecture, system interactions, and new products through an outside-in threat perspective
- Apply threat intelligence, incident response data, detection telemetry, security tooling, and internal risk signals
- Coordinate research and oversee Salesforce’s top threats program
- Review endpoint, network, and security-tool logs to uncover control gaps and bypasses
- Work with executive stakeholders to turn assessments into practical security recommendations
- Lead security improvements arising from incidents with Product and Enterprise Security partners
- Advise Product teams as a subject matter expert during solution design
- Build and coordinate agentic tools that support team analysis and security projects
- Deliver applied threat insights to security and leadership stakeholders with Threat Intelligence partners
- Partner with Cyber Security Operations architects and principals to develop alerts for realized threats
- Mentor junior analysts and engineers
Cerințe
- At least eight years of experience in threat modeling and security architecture
- Deep understanding of threat actor tactics and offensive strategies
- Strong research and analytical capabilities
- Experience with the Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and STRIDE
- Working knowledge of application security and OWASP Top 10 vulnerabilities
- In-depth understanding of cloud security and core cloud architecture principles
- Strong knowledge of exploitation and abuse threats across SaaS and PaaS providers
- Proficiency analyzing logs from a range of security tools
- Excellent written and verbal communication skills
- A related technical degree is required
Beneficii
- Time-off programs
- Medical insurance
- Dental insurance
- Vision insurance
- Mental health support
- Paid parental leave
- Life insurance
- Disability insurance
- 401(k) retirement plan
- Employee stock purchase program
- Incentive compensation, equity, and benefits may be available for certain roles