AppSec Director - Enterprise Security & Advisory

Salesforce, Inc.; Illinois; On-site; USD 171,000 - 273,000; Full time

Job summary

Salesforce is seeking an experienced AppSec leader to drive security engagements for enterprise customers and translate risk into actionable remediation roadmaps. You will lead scoping, staffing, and end-to-end delivery while partnering with sales on pre-sales efforts.

The role emphasizes secure SDLC practices, vulnerability management and strong executive communication with CISO/CTO-level stakeholders, in a SaaS environment.

Qualifications

• 7–12+ years of AppSec experience.
• Deep knowledge of OWASP Top 10 and common vulnerabilities.
• Experience securing SaaS platforms with IAM and API security.
• Strong communication with CISO/CTO-level stakeholders.

Responsibilities

• Apply AppSec expertise to lead and validate security engagements for enterprise customers.
• Identify and advise on common application vulnerabilities.
• Advise customers on secure SaaS implementation and ongoing security hygiene.
• Translate findings into prioritized remediation roadmaps for client stakeholders.
• Lead end-to-end delivery of security engagements, including scoping and staffing.
• Partner with account teams on pre-sales, discovery, and SOW development.
• Act as trusted advisor to C-suite and senior security stakeholders.
• Oversee delivery teams to ensure consistent methodology and quality.
• Develop reusable accelerators, playbooks, and best practices.
• Mentor staff on security substance and client-facing engagement skills.

Skills

AppSec

Secure SDLC

Threat modeling

Penetration testing

OWASP Top 10

SaaS security

Executive communication

Job description

Salesforce is seeking an experienced AppSec leader to drive security engagements for enterprise customers and translate risk into actionable remediation roadmaps. You will lead scoping, staffing, and end-to-end delivery while partnering with sales on pre-sales efforts.

The role emphasizes secure SDLC practices, vulnerability management and strong executive communication with CISO/CTO-level stakeholders, in a SaaS environment.