Lead Security Architect, AppSec & Cloud Assurance

salesforce.com, inc.; Colorado; On-site; USD 150,000 - 227,000; Full time

Job summary

Salesforce is building a new Professional Services Security Assurance (PSSA) team within the Security Practice. You will deliver high-impact security assessments for customer deployments, translating complex risks into actionable improvements and guidance for executive stakeholders.

As a founding, hands-on security expert, you will shape security standards, collaborate with engineering, and drive secure-by-design practices across customers and engagements.

Qualifications

• Hands-on experience performing application security assessments including architecture reviews, threat modeling, code reviews, and cloud security reviews.
• Strong understanding of OWASP Top 10, API Security Top 10, and common attack techniques.
• Experience communicating findings and remediation guidance to technical and executive stakeholders.

Responsibilities

• Lead security engagements by conducting in-depth assessments of web, mobile, API, cloud, and AI-enabled applications.
• Develop comprehensive assessment reports communicating risk, findings, and remediation recommendations.
• Collaborate with Professional Services to integrate security across the software development lifecycle.
• Build and refine assessment methodologies, automation, and tooling to scale security engagements.

Skills

Application Security

Security Assessments

Threat Modeling

Penetration Testing

Cloud Security

Programming (Java/Python/JS/Go/C#)

Communication

Education

Bachelor’s degree in CS/ Cybersecurity or related field

Tools

Security tooling

Automation frameworks

Job description

Salesforce is building a new Professional Services Security Assurance (PSSA) team within the Security Practice. You will deliver high-impact security assessments for customer deployments, translating complex risks into actionable improvements and guidance for executive stakeholders.

As a founding, hands-on security expert, you will shape security standards, collaborate with engineering, and drive secure-by-design practices across customers and engagements.