Lead Threat Architect - AI-Driven Security & Threat Modeling

Salesforce; San Francisco (CA); On-site; USD 173,000 - 260,000; Full time

Job summary

Salesforce is seeking a Lead Threat Assessment Engineer to drive threat modeling and security architecture across global infrastructure. You will mentor junior analysts and scale tooling, translating research into actionable requirements for product security partners.

You will work with Threat Intelligence, SOC, and Product teams to shape security posture, employing agentic tooling and frontier harnesses to accelerate defense across SaaS and PaaS platforms.

Qualifications

• 8+ years of experience in threat modeling and security architecture.
• Experience with threat modeling frameworks such as Cyber Kill Chain, Diamond Model, MITRE ATT&CK, STRIDE.
• In-depth knowledge of cloud security for SaaS/PaaS.
• Proficient in analyzing logs from security tools.
• Excellent written and spoken communication.
• A related technical degree is required.

Responsibilities

• Conduct threat modeling for infrastructure and application-level scenarios.
• Analyze logs from endpoint, network, and security tooling to identify gaps.
• Engage executives to translate assessments into actionable recommendations for products and partners.
• Design and orchestrate new agentic tooling and workflows.
• Provide strategic threat insights to security leadership and stakeholders.
• Collaborate with architects and security teams to design alerts against realized threats.

Skills

Threat modeling

Security architecture

MITRE ATT&CK

OWASP Top 10

Cloud security

Logs analysis

Communication

Security tooling

Education

Related technical degree

Tools

Security tooling

Job description

Salesforce is seeking a Lead Threat Assessment Engineer to drive threat modeling and security architecture across global infrastructure. You will mentor junior analysts and scale tooling, translating research into actionable requirements for product security partners.

You will work with Threat Intelligence, SOC, and Product teams to shape security posture, employing agentic tooling and frontier harnesses to accelerate defense across SaaS and PaaS platforms.