Product Security Engineer, Infrastructure

salesforce.com, inc.; San Francisco (CA); On-site; USD 117,000 - 194,000; Full time

Job summary

Salesforce is seeking a Product Security Engineer, Infrastructure to fortify our core infrastructure platforms across on-premises and public cloud environments. You will provide strategic security guidance to engineering teams, drive threat modeling, and lead risk mitigation initiatives throughout the software development lifecycle.

The role involves aligning security priorities with business risk, influencing secure design, and partnering with BISOs to shape roadmaps while advocating for

Qualifications

• 3–5 years in security engineering/architecture/assurance roles.
• Experience securing products and infrastructure in one or more public cloud environments.
• Familiar with threat modeling and risk assessment methodologies.
• Understanding of OAuth/OIDC, SAML, API auth models, TLS, and PKI concepts.
• Strong written and verbal communication to influence engineering teams.

Responsibilities

• Provide expert security advisory for large-scale cloud initiatives.
• Lead threat modeling and risk mitigation across SDLC.
• Influence secure design with product teams balancing function and security.
• Collaborate with BISOs to align security priorities with business risk.

Skills

Cloud security

Threat modeling

Secure SDLC

Identity & access

Security leadership

Tools

Kubernetes

Docker

Istio

SAST

Job description

Salesforce is seeking a Product Security Engineer, Infrastructure to fortify our core infrastructure platforms across on-premises and public cloud environments. You will provide strategic security guidance to engineering teams, drive threat modeling, and lead risk mitigation initiatives throughout the software development lifecycle.

The role involves aligning security priorities with business risk, influencing secure design, and partnering with BISOs to shape roadmaps while advocating for