Strategic Product Security Engineer (Cloud & Infra Architecture)

Salesforce, Inc.; Ashington; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Medical Care

Life Insurance

Retirement Savings

Employee Assistance Programs

13 paid holidays

Job summary

Salesforce, Inc. is seeking a Senior Product Security Engineer to fortify the bedrock of our product ecosystem. You will advise engineering teams responsible for foundational services, including controls, databases, and monitoring across public cloud platforms.

You will lead security architecture and threat modeling initiatives, partnering with BISOs and product teams to balance security with functional goals in a scalable SDLC environment.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 5–8 years in security engineering, security architecture, or security assurance.
• Experience with cloud providers (AWS, Azure, GCP) and secure SDLC practices.
• Experience with threat modeling, risk assessment, and architectural reviews.
• Ability to read and reason about code in Java/Go/Python and familiarity with container security.

Responsibilities

• Provide security leadership for foundational services across on‑prem and cloud environments.
• Deliver strategic security guidance to engineering teams and leadership.
• Develop risk-based security roadmaps and influence secure design decisions.
• Lead threat modeling and risk assessments for large-scale cloud initiatives.
• Champion secure SDLC and security advisory programs within engineering teams.

Skills

Cloud security

Threat modeling

Security architecture

OAuth/OIDC/SAML

Container security

Kubernetes/Docker security

Education

Bachelor's degree in CS or related

Tools

Kubernetes

Docker

SAST tools

Infrastructure as Code

Job description

Salesforce, Inc. is seeking a Senior Product Security Engineer to fortify the bedrock of our product ecosystem. You will advise engineering teams responsible for foundational services, including controls, databases, and monitoring across public cloud platforms.

You will lead security architecture and threat modeling initiatives, partnering with BISOs and product teams to balance security with functional goals in a scalable SDLC environment.