Lead Threat Assessment Engineer

Salesforce; San Francisco (CA); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Medical Care

Life Insurance

Retirement Savings

Employee Assistance Programs

With 9 standard holidays and four浮ing(

With 9 standard holidays and four浮ing(

Job summary

Salesforce is seeking a Lead Threat Assessment Engineer on the Environmental Threat Assessment team to own threat modeling, security architecture, and cross‑functional collaboration across our global infrastructure.

You will mentor a team of junior analysts, drive automation and agentic tooling, translate findings into actionable requirements for Product, Enterprise Security, and Engineering, and influence security posture and product decisions.

Qualifications

• 8+ years of threat modeling and security architecture experience.
• Expertise in cloud security for SaaS/PaaS.
• Strong research and analytical skills with data correlation across sources.

Responsibilities

• Lead threat assessments and mentor junior analysts.
• Translate assessments into actionable requirements for Product & Enterprise Security partners.
• Design and drive automation and agentic tooling to scale capabilities.
• Collaborate with architects and stakeholders to improve security posture across Salesforce products.
• Focus on infrastructure and application threat models with an outside-in perspective.

Skills

Threat modeling

Security architecture

Cloud security

Threat intelligence

Incident response

Log analysis

Executive communication

Automation

AI tooling

Mentoring

Education

Technical degree

Tools

Security tooling

Job description

• As a Lead Threat Assessment Engineer on the Environmental Threat Assessment team, you serve as an assessment lead and subject matter expert, supporting and building how we identify and mitigate threats across our global infrastructure


• You will not only execute complex threat assessments but also mentor a team of junior analysts and engineers, helping to scale our capabilities through automation and “agentic” security investments


• Your work will directly shape Salesforce’s security posture by translating deep technical research into actionable requirements for Product & Enterprise Security partners and Product/Engineering stakeholders


• This role is within the Cybersecurity Operations Center vertical of Salesforce Security


• Conducting threat modeling for infrastructure and application-level threat scenarios, including security architecture, system interactions, and new products/features from an observed/realized threat and outside-in perspective


• Utilizing threat intelligence, incident response and detection telemetry, proprietary security tooling, and internal security and risk signals to correlate research and manage Salesforce’s top threats program


• Analyzing logs from endpoint, network, and other security tooling to identify potential gaps in coverage or hunting for bypassing of existing controls, across new and existing business units


• Engaging executive stakeholders across the company to translate assessments into actionable recommendations that shape the business and our products


• Driving uplifts identified from security incidents with Product and Enterprise Security partners and serving as an SME for Product teams during design solutioning


• Design and orchestrate new agentic tooling for the team analysis capabilities and projects, supported by frontier harnesses, org-specific skills, and human workflows


• Providing strategic and tactical applied threat insights to Security and leadership stakeholders by contextualizing intelligence in Salesforce context in partnership with Threat Intelligence


• Collaborating with architects and principals across Cyber Security operations, including Threat Detection and Data Science, to design alerting against realized threats

Benefits

• Medical Care


• Life Insurance


• Retirement Savings


• Employee Assistance Programs


• With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year

8+ years of experience in threat modeling and security architectureIn-depth knowledge of cloud security and cloud architecture fundamentals and strong understanding of common exploitation and abuse threats observed across for SaaS and PaaS providersSignificant understanding of threat actor tactics and offensive strategies and strong research and analytical skills with the ability to correlate data from various sourcesExcellent communication skills, both written and oralProficiency in analyzing logs from various security toolsA related technical degree requiredExperience using threat modeling and analysis frameworks such as Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and STRIDE, and familiarity with application security, specifically with the OWASP Top 10 vulnerabilitiesExperience in Product or Enterprise Security design reviews and security assuranceExperience automating processes and/or using AI tooling to automate workflows and data analysis