Product Security Engineer

Salesforce, Inc.; San Francisco (CA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce, Inc. is seeking a Product Security Engineer, Infrastructure to fortify the security of our foundational services across on‑prem and cloud environments.

In this role you will provide architectural guidance to engineering teams, conduct threat modeling, and influence secure design decisions across our infrastructure stack. You will collaborate with BISOs, security owners, and product teams to align security with business risk, support secure SDLC, and translate complex technical risk

Qualifications

• 3–5 years in security engineering, security architecture, or security assurance.
• Experience securing products and infrastructure in one or more public clouds and ability to perform threat modeling across infra/app domains.
• Familiarity with OAuth/OIDC, SAML, PKI, TLS, and secure network design.

Responsibilities

• Provide expert security advisory for large-scale cloud initiatives and enterprise architectures.
• Drive threat modeling and risk mitigation throughout the SDLC with engineering partners.
• Influence secure design decisions and align security with business risk alongside BISOs and product teams.

Skills

Cloud Security

Threat Modeling

Identity & Access

Network & TLS

Security Architecture

Secure SDLC

Kubernetes

Docker

SAST

CSPM

Tools

Kubernetes

Docker

SAST

CSPM

Job description

## Product Security EngineerApply: Office Tech-Flexible: Washington - Bellevue: California - Palo Alto: Washington - Seattle: California - San Francisco: Full time: Posted Today: JR358978*To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.*Job CategoryProductJob Details****About Salesforce****Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.**Job Title:** Product Security Engineer, Infrastructure **Job Category:** Technology / Security **Location:** San Francisco, CA or Bellevue, WA **The Experience** Join our Infrastructure Product Security Assurance team as a Product Security Engineer, where you play a pivotal role in fortifying the bedrock of Salesforce's entire product ecosystem. In this highly impactful position, you leverage deep technical expertise to provide strategic security guidance and leadership to engineering teams responsible for our foundational services, including technical controls, infrastructure databases, and monitoring tools across public cloud platforms. As a trusted security engineer, you serve as the primary point of contact for engineering partners and leadership, cultivating strong relationships and delivering critical security recommendations. Your contributions directly shape and enhance the security posture of our core infrastructure platforms, ensuring the resilience and integrity of Salesforce's offerings. Our team specializes in providing deep architectural and infrastructure security expertise across a diverse range of technologies, both on-premises and in public cloud environments, including web applications, distributed systems, and virtualized infrastructures. You champion secure software development lifecycle (SSDL) best practices, empowering engineering teams to build secure products from the ground up. **What You'll Actually Be Doing*** Provide expert security advisory for large-scale cloud initiatives, offering strategic guidance to engineering teams on complex enterprise architectures across the application and infrastructure stack.* Drive proactive security through architecture and threat modeling, partnering with engineering teams to identify vulnerabilities and develop risk mitigation plans throughout the software development lifecycle (SDLC).* Influence secure design and implementation by collaborating with product teams to recommend design solutions that balance functional goals with security requirements.* Align security priorities with business risk by working with Product Business Information Security Officers (BISOs) to curate and prioritize risk-based security initiatives, and by analyzing risk signals and emerging threats to shape security roadmaps.**You're Our Person If...*** You have 3-5 years of experience in a security engineering, security architecture, or security assurance role.* **Cloud Security:** You have experience securing products and infrastructure across one or more public cloud environments (Amazon Web Services, Google Cloud Platform, Microsoft Azure, Alibaba Cloud, or equivalent), with an understanding of cloud service models, shared responsibility boundaries, and identity primitives at scale.* **Threat Modeling & Risk Assessment:** You have experience conducting structured security design reviews and threat modeling across infrastructure and application security domains, with familiarity with common vulnerability classes (Open Web Application Security Project (OWASP) Top 10, Common Weakness Enumeration (CWE) Top 25), and can evaluate and communicate security risk to technical and non-technical audiences alike.* **Identity, Access, and Network Fundamentals:** You understand authentication and authorization patterns including Open Authorization (OAuth) / OpenID Connect (OIDC), Security Assertion Markup Language (SAML), service-to-service authentication, and API authorization models, as well as TCP/IP, Transport Layer Security (TLS), network segmentation, and key management, certificate lifecycles, secrets handling, and encryption standards.* You have strong written and verbal communication skills, with the ability to influence engineering teams toward secure outcomes without relying on direct organizational authority.**Even Better If...*** You can reason through abuse cases and attack paths, not just defensive recommendations, with some familiarity with penetration testing methodologies or offensive security techniques.* You have experience participating in or driving improvements to a secure development lifecycle, security review process, or security advisory program within an engineering organization.* You can work with structured data, identify patterns across a broad service portfolio, and propose mitigations that address root causes rather than individual findings.* You can read and reason about code in one or more languages common in cloud-native engineering environments — particularly Java, Go, or Python — and have hands-on familiarity with container orchestration and workload security (Kubernetes, Docker, service mesh such as Istio), secrets/key management and Public Key Infrastructure (PKI) tooling, Cloud Security Posture Management (CSPM) and vulnerability scanning tools, or static analysis (SAST) and infrastructure-as-code security scanning.Unleash Your PotentialWhen you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and *be your best*, and our AI agents accelerate your impact so you can *do your best*. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.AccommodationsIf you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.Posting StatementSalesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.### ### ### ### At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.The typical base salary range for this position is $117,200 - $176,700 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $141,200 - $194,200 annually.The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.