Lead Security Architect for Apps & Cloud

salesforce.com, inc.; Virginia (MN); On-site; USD 150,000 - 227,000; Full time

Job summary

Salesforce, Inc. is seeking a seasoned security professional to join the newly formed Professional Services Security Assurance team. You will lead high-impact security assessments across web, mobile, API, cloud, and AI-enabled apps, translating risks into actionable security postures.

You will drive threat modeling, secure design reviews, and remediation guidance for customers, collaborating with engineering to embed security across the SDLC and shape scalable security standards.

Qualifications

• 5+ years of experience in Application Security, Product Security, or Security Consulting.
• Hands-on security assessments including architecture reviews, threat modeling, and security testing.
• Experience with OWASP Top 10, API Security Top 10, and modern application architectures.

Responsibilities

• Lead customer engagements with high-quality security assessments across web, mobile, API, cloud, and AI-enabled apps.
• Develop threat models, design reviews, and remediation guidance for secure deployments.
• Prepare comprehensive reports with risk ratings and actionable recommendations for technical and executive stakeholders.
• Advise customers on security posture improvements and best practices through the SDLC.
• Collaborate with Professional Services to embed security across design, build, and deployment.
• Contribute to security standards, reference architectures, and tooling to scale assessments.

Skills

Application Security

Security Assessments

Threat Modeling

Java

Python

JavaScript/TypeScript

Go

C#

Education

Bachelor's degree in Computer Science or related field

Job description

Salesforce, Inc. is seeking a seasoned security professional to join the newly formed Professional Services Security Assurance team. You will lead high-impact security assessments across web, mobile, API, cloud, and AI-enabled apps, translating risks into actionable security postures.

You will drive threat modeling, secure design reviews, and remediation guidance for customers, collaborating with engineering to embed security across the SDLC and shape scalable security standards.