Lead Product Security Engineer

Leadout Capital; Dublin; On-site; EUR 110,000 - 170,000; Full time

Job summary

Salesforce in Dublin, Ireland, seeks a technical authority to review designs and recommend fixes for the platform behind our clouds. You partner with engineering leaders to build security into every design decision, strengthening the trust customers place in Salesforce.

You will lead threat modeling and architecture reviews for data platforms, AI integrations, and public-sector deployments, and review Java, C, and C++ code for security flaws.

Qualifications

• 7+ years in product security, application security, or security architecture.
• Knowledge of at least two programming languages (e.g., Java, C, or C++).
• Expertise in OWASP Top 10 and SANS Top 25.
• Experience reviewing complex code for security flaws.
• Degree or equivalent relevant experience.

Responsibilities

• Integrate secure development practices into the full software lifecycle for your product areas.
• Lead threat modeling and architecture reviews for data platforms, AI integrations, and public-sector deployments.
• Review source code across Java, C, and C++, guiding on identity, access control, and cloud configuration.
• Advise engineering leaders on security risk in business terms and guide the security plan for platform rebuild while retiring legacy environments.

Skills

Threat modeling

Architecture reviews

Code review

Security architecture

Security leadership

Education

Degree or equivalent

Tools

Static code scanning tools

Dynamic code scanning tools

Cloud security tools

Job description

The Experience

Join the Salesforce Product Security Advisors team in Dublin, Ireland, as the technical authority who reviews designs and recommends fixes for the platform behind our clouds. You partner with engineering teams and leaders to build security into every design decision, and your advice directly strengthens the trust our customers place in Salesforce.

What You'll Actually Be Doing

• Build secure development practices into the full software lifecycle for your product areas, so that teams can repeat them at scale.
• Lead threat modeling and architecture reviews for data platforms, AI integrations, and public-sector deployments to find design flaws early.
• Review source code with manual and automated methods across languages such as Java, C, and C++, and guide teams on identity, access control, and cloud configuration.
• Advise engineering leaders on security risk in clear business terms, including recommending a delay to launch when critical requirements are not met, and guide the security plan for a fast platform rebuild while the legacy environment is retired.

You're Our Person If...

• You have 7+ years in product security, application security, or security architecture, securing enterprise cloud platforms.
• You have working knowledge of at least two programming languages, such as Java, C, or C++, and experience reviewing complex code for security flaws.
• You know application, cloud, and data security, including how they connect, and you are an expert in the OWASP Top 10 and SANS Top 25 and in modern static and dynamic code scanning tools.
• You turn complex vulnerabilities into business risk that stakeholders understand, and you are open to using AI tools to deliver better security assessments.
• Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.)

Even Better If...

• You have security experience with mergers and acquisitions, including retiring legacy systems and moving platforms quickly.
• You hold an offensive security or cloud security certification, or you have web application penetration testing experience.
• You take part in bug bounty programs or contribute to open-source security tools or research.
• You know the Salesforce ecosystem.