Security Assurance Lead — AI, Cloud & App Security

Salesforce; New York (NY); On-site; USD 180,000 - 248,000; Full time

Job summary

Salesforce is seeking a hands-on security expert to lead security assessments across web, mobile, API, cloud, and AI-enabled applications. You will translate complex risks into actionable security postures and work with customers to improve their security posture.

You will drive threat modeling, architecture reviews, and secure development practices while collaborating with the Security Practice and Professional Services teams to scale security engagements.

Qualifications

• Hands-on experience performing application security assessments including architecture and design reviews, threat modeling, secure code reviews, penetration testing, and cloud security reviews.
• Strong understanding of OWASP Top 10, API Security Top 10, and common attack techniques.
• Experience communicating findings and remediation guidance to technical and executive stakeholders.

Responsibilities

• Lead customer engagements by performing in-depth security assessments of web, mobile, API, cloud, and AI-enabled applications.
• Conduct threat modeling to identify attack vectors and recommend security controls balancing security and business needs.
• Develop security assessment reports with clear risk ratings and actionable remediation guidance.

Skills

Security assessments

Threat modeling

Secure code reviews

Penetration testing

Cloud security

API security

Programming languages

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field

Job description

Salesforce is seeking a hands-on security expert to lead security assessments across web, mobile, API, cloud, and AI-enabled applications. You will translate complex risks into actionable security postures and work with customers to improve their security posture.

You will drive threat modeling, architecture reviews, and secure development practices while collaborating with the Security Practice and Professional Services teams to scale security engagements.