Lead Security Architect for AppSec & Cloud – Founding Role

salesforce.com, inc.; Maryland; On-site; USD 180,000 - 230,000; Full time

Job summary

Salesforce is seeking a hands-on Senior/Lead Application Security expert to drive security engagements for customers. You will perform architecture reviews, threat modeling, code reviews, and penetration tests across web, mobile, API, cloud, and AI-enabled apps.

You’ll translate complex findings into actionable security postures for executive stakeholders and partner with the Professional Services Security Assurance team to embed security across the SDLC.

Qualifications

• Senior: 5+ years in Application Security, Product Security, or Security Consulting.
• Lead: 8+ years in the same fields.
• Hands-on security assessments including architecture reviews, threat modeling, code reviews, pentesting, and cloud security reviews.
• Knowledge of OWASP Top 10, API Security Top 10, and secure development practices.

Responsibilities

• Lead customer engagements with in-depth security assessments across web, mobile, API, cloud and AI-enabled apps.
• Conduct threat modeling to identify risks and suggest balanced security controls.
• Develop and deliver clear assessment reports for technical and executive audiences.
• Advise customers on remediation and secure development practices.
• Collaborate with Professional Services to embed security across SDLC.
• Improve methodologies, tooling, and automation for scalable assessments.
• Define standards and reference architectures with internal teams and clients.
• Research emerging threats and evolving attack techniques to refine methods.
• Build strong customer relationships through effective, consultative engagement.

Skills

Application Security

Threat Modeling

Security Assessments

Code Review

Penetration Testing

Cloud Security

Communication

Programming (Java/Python/JS/Go/C#)

Education

Bachelor's degree in CS or related

Job description

Salesforce is seeking a hands-on Senior/Lead Application Security expert to drive security engagements for customers. You will perform architecture reviews, threat modeling, code reviews, and penetration tests across web, mobile, API, cloud, and AI-enabled apps.

You’ll translate complex findings into actionable security postures for executive stakeholders and partner with the Professional Services Security Assurance team to embed security across the SDLC.