Director, Application Security & Delivery

Salesforce, Inc.; Georgia; On-site; USD 171,000 - 273,000; Full time

Job summary

Salesforce is seeking a senior AppSec professional to lead and deliver enterprise security engagements across the SaaS ecosystem. You will translate risk into remediation roadmaps for C-suite stakeholders and guide scoping, staffing, and delivery of complex security engagements.

You'll demonstrate deep OWASP Top 10 expertise, hands-on secure SDLC practices, and the ability to advise on IAM, API security, data protection, and ongoing security hygiene throughout the SaaS lifecycle.

Qualifications

• 7-12+ years of AppSec experience (secure SDLC, vulnerability management, threat modeling, pen testing) - core, hands-on requirement.
• Deep, working knowledge of the OWASP Top 10 and common application-layer vulnerability classes.
• Practical understanding of how to secure a SaaS platform through implementation and ongoing use - configuration hardening, IAM, API/integration security, and the shared-responsibility model.
• Strong executive communication and presence; comfortable with CISO/CTO-level conversations.
• Security certifications strongly preferred (CISSP, OSCP, or equivalent AppSec certs).

Responsibilities

• Apply AppSec expertise to lead and validate security engagements for enterprise customers.
• Identify and advise on common application vulnerabilities (OWASP Top 10, injection, broken access control, SSRF, insecure deserialization, etc.).
• Advise customers on secure implementation and use of SaaS platforms - configuration hardening, IAM, API security, data protection, and ongoing security hygiene.
• Translate AppSec findings into prioritized, risk-based remediation roadmaps for client stakeholders.
• Lead end-to-end delivery of security engagements - scoping, staffing, timeline, and risk ownership.
• Partner with account teams and sales leadership on pre-sales - discovery, solution scoping, SOW development, and executive presentations.
• Act as trusted advisor to C-suite security stakeholders, translating technical risk into business terms.
• Oversee delivery teams to ensure consistent methodology and quality across engagements.
• Develop reusable delivery accelerators, methodologies, and playbooks grounded in AppSec best practice.
• Mentor practice staff on security substance and client-facing engagement skills.

Skills

AppSec experience

OWASP Top 10 knowledge

Executive communication

CISO/CTO liaison

Job description

Salesforce is seeking a senior AppSec professional to lead and deliver enterprise security engagements across the SaaS ecosystem. You will translate risk into remediation roadmaps for C-suite stakeholders and guide scoping, staffing, and delivery of complex security engagements.

You'll demonstrate deep OWASP Top 10 expertise, hands-on secure SDLC practices, and the ability to advise on IAM, API security, data protection, and ongoing security hygiene throughout the SaaS lifecycle.