Cloud & Infrastructure Security Engineer

salesforce.com, inc.; Bellevue (WA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Product Security Engineer, Infrastructure to fortify the bedrock of our product ecosystem. You will provide security guidance to engineering teams responsible for foundational services across public cloud and on‑prem environments.

The role emphasizes secure SDLC, threat modeling, and cross‑functional collaboration with BISOs to align security with business risk. Location options include San Francisco or Bellevue, WA.

Qualifications

• 3–5 years of experience in a security engineering, security architecture, or security assurance role.
• Cloud Security: experience securing products and infrastructure across one or more public cloud environments with understanding of cloud service models and identity primitives at scale.
• Threat Modeling & Risk Assessment: experience with structured security design reviews and threat modeling, familiarity with OWASP Top 10 and CWE Top 25.
• Identity, Access, and Network Fundamentals: knowledge of OAuth/OIDC, SAML, API authorization, TLS, network segmentation, and key management.
• Strong written and verbal communication skills with ability to influence engineering teams toward secure outcomes.

Responsibilities

• Provide expert security advisory for large-scale cloud initiatives, guiding engineering teams on enterprise architectures across application and infrastructure stacks.
• Drive proactive security through architecture and threat modeling and develop risk mitigation plans across the SDLC.
• Influence secure design by collaborating with product teams to balance functionality with security requirements.
• Align security priorities with business risk by coordinating with BISOs to curate risk-based security initiatives and analyze emerging threats.

Job description

Salesforce is seeking a Product Security Engineer, Infrastructure to fortify the bedrock of our product ecosystem. You will provide security guidance to engineering teams responsible for foundational services across public cloud and on‑prem environments.

The role emphasizes secure SDLC, threat modeling, and cross‑functional collaboration with BISOs to align security with business risk. Location options include San Francisco or Bellevue, WA.