Lead Security Consultant - Professional Services Security Assurance (PSSA)

salesforce.com, inc.; Chicago (IL); On-site; USD 150,000 - 227,000; Full time

Job summary

Salesforce is building a brand-new Professional Services Security Assurance (PSSA) team within the Security Practice. The hands-on, senior security expert will deliver high-impact engagements, translate risks into actionable postures, and shape secure-by-design deployments for customers.

You will lead security assessments, develop remediation guidance, and collaborate across teams to advance security practices across the lifecycle. This is a founding, high-impact role at scale.

Qualifications

• 5+ years of experience in Application Security, Product Security, or Security Consulting.
• 8+ years for Lead role.
• Hands-on experience with security assessments including architecture reviews, threat modeling, code reviews, and penetration testing.
• Strong knowledge of OWASP Top 10, API Security Top 10, and common attack techniques.
• Experience assessing modern architectures: web apps, APIs, microservices, containers, cloud-native, AI-enabled apps.
• Experience communicating findings to technical and executive stakeholders.
• Strong consulting skills and ability to influence security outcomes.
• Proficiency in Java, Python, JavaScript/TypeScript, Go, or C#.

Responsibilities

• Lead customer engagements by performing in-depth security assessments of web, mobile, API, cloud, and AI-enabled applications.
• Conduct threat modeling to identify attack vectors and recommend security controls balancing security and usability.
• Develop comprehensive assessment reports with findings, risk ratings, and remediation recommendations.
• Serve as a trusted security advisor with practical remediation guidance.
• Collaborate with professional services to integrate security across the software lifecycle.
• Develop and enhance assessment methodologies, automation, and tooling for quality and scale.
• Define technical security standards, reference architectures, and secure development guidelines.
• Research emerging technologies and techniques to improve assessment methodologies.
• Build strong customer relationships through communication and leadership throughout engagements.

Skills

Application Security

Security Consulting

Threat Modeling

Secure Coding

Programming (Java/Python/JS/Go/C#/TS)

Cloud Security

Communication with Stakeholders

Education

Bachelor's degree in Computer Science or related field

Job description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

About the Team

We are building a brand new Professional Services Security Assurance (PSSA) team - a true 0 to 1 opportunity. This team sits within the Security Practice, part of the broader Professional Services organization. Our mission is to empower the Professional Services organization to deliver secure implementations and protect customer data at scale.
We focus on securing the configurations, integrations, and implementations delivered to our customers. As a founding, hands-on technical member of the Security Assurance team within our Security Practice, you will deliver direct security engagements to our customers, ensuring every deployment is secure by design - and shaping the strategic foundation of our practice.

Role Overview

As a hands-on technical expert, you will act as a force multiplier for our PSSA organization. Your primary focus is the delivery of high-impact security engagements directly to our customers, translating complex technical risks into actionable security postures.

What You'll Do

• Lead customer engagements by performing in-depth, high-quality security assessments of web, mobile, API, cloud, and AI-enabled applications - including architecture and design reviews, threat modeling, secure code reviews, and penetration testing.
• Conduct threat modeling exercises to identify potential attack vectors, evaluate business risk, and recommend security controls that effectively balance security, usability, and business objectives.
• Develop comprehensive security assessment reports that clearly communicate findings, risk ratings, and actionable remediation recommendations to both technical and executive stakeholders.
• Serve as a trusted security advisor to customers by providing practical remediation guidance, security best practices, and recommendations that improve the overall security posture of their applications and services.
• Collaborate closely with the professional services org to integrate security throughout the software development lifecycle, from design through deployment.
• Develop and enhance assessment methodologies, automation, and security tooling to improve assessment quality, consistency, and scalability across customer engagements.
• Define and contribute to technical security standards, reference architectures, and secure development guidelines in partnership with internal teams and customers.
• Research emerging technologies, evolving attack techniques, and security vulnerabilities to continuously improve assessment methodologies and provide proactive security recommendations.
• Build strong customer relationships through effective communication, technical leadership, and consultative engagement throughout the assessment lifecycle.

You're Our Person If...

Required Experience

• Senior: 5+ years of experience in Application Security, Product Security, or Security Consulting
• Lead: 8+ years of experience in Application Security, Product Security, or Security Consulting
• Hands-on experience performing application security assessments, including architecture and design reviews, threat modeling, secure code reviews, penetration testing, and cloud security reviews.
• Strong understanding of common application security vulnerabilities and secure development practices, including the OWASP Top 10, API Security Top 10, and common attack techniques.
• Experience assessing modern application architectures, including web applications, APIs, microservices, containers, cloud-native environments, and AI-enabled applications.
• Experience communicating security findings, risk, and remediation guidance to technical and executive stakeholders.
• Strong customer-facing consulting skills with the ability to build trusted relationships and influence security outcomes across diverse organizations.
• Excellent analytic, problem‑solving, collaboration, written, and verbal communication skills.
• Proficiency in one or more programming or scripting languages such as Java, Python, JavaScript/TypeScript, Go, or C#.
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related technical field - or equivalent practical experience.

Even Better If You Have...

• Experience assessing AI applications and agentic systems.
• Experience developing security automation, reusable assessment frameworks, or security tooling to improve assessment quality and scale.
• Familiarity with industry security frameworks and standards such as ISO 27001, SOC 2, PCI DSS, NIST CSF, and MITRE ATT&CK.
• Experience defining and communicating prioritized remediation plans and partnering with engineering teams to drive security improvements.
• Experience mentoring security consultants or leading technical customer engagements.

Why Join Us

This is a founding role - a rare chance to build something from the ground up within an established, high-scale Professional Services organization. You'll set the tone for how we deliver security, mentor future team members, and directly shape the methodologies and culture of the PSSA practice.

Unleash Your Potential

When you join Salesforce, you'll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we'll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love.

Accommodations

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.

Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates' resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that's inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications - without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records. At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions. The typical base salary range for this position is $150,100 - $227,000 annually. There is a different range applicable to specific work locations. In California and New York, and select cities in the metropolitan areas of Boston, Chicago, Seattle, and Washington DC, the base pay range for this role in those locations is $180,200 - $247,900 per year. Your recruiter can share more about the specific salary range for the job location during the hiring process. The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.