Product Security Engineer
salesforceWashington (DC)
Product Security Engineer
Posted today
salesforceWashington (DC)
SENIORITY
Lead
About the role
Overview:
In this role you fortify Salesforce’s core infrastructure by delivering security guidance across cloud and on‑premises services. You’ll work with engineering partners to shape secure architectures, drive risk-based security initiatives, and champion secure SDLC practices. You’ll influence design decisions and help manage risk in a large-scale product ecosystem, partnering with BISOs and cross‑functional teams to strengthen security posture. This is an opportunity to impact foundational platforms that power Salesforce offerings, in a high‑visibility, security‑centric environment. Compensation / Benefits time off programs medical, dental, vision mental health support paid parental leave 401(k) employee stock purchasing program
Responsibilities:
Provide expert security advisory for large-scale cloud initiatives to engineering teams Drive proactive security through architecture and threat modeling across the SDLC Influence secure design by collaborating with product teams to balance functionality and security Align security priorities with business risk with BISOs to curate risk-based initiatives and shape roadmaps
Key requirements:
3-5 years in security engineering, security architecture, or security assurance Experience securing products and infrastructure across one or more public cloud environments Experience with threat modeling and risk assessment across infrastructure and application security domains Understanding of authentication/authorization patterns (OAuth/OIDC, SAML) and network/security fundamentals Strong written and verbal communication skills to influence engineering teams strong communication and influencing abilities ability to work without direct authority ability to reason about abuse cases and attack paths Cloud security across AWS, GCP, Azure, Alibaba Cloud Threat modeling and risk assessment OWASP Top 10, CWE Top 25 familiarity
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.