Senior Cloud & Infrastructure Security Engineer

Leadout Capital; Palo Alto (CA); On-site; USD 160,000 - 230,000; Full time

Job summary

Salesforce is seeking a Senior Product Security Engineer, Infrastructure to fortify the security of our core infrastructure across public cloud and on‑prem environments. You will provide strategic security guidance to engineering teams responsible for foundational services, and you’ll influence architecture and threat modeling across the stack.

You’ll partner with BISOs and product teams to translate risk signals into prioritized security initiatives, while promoting secure SDLC practices and

Qualifications

• 5-8 years of experience in security engineering, security architecture, or security assurance.
• Experience securing products and infrastructure in public cloud environments (AWS, GCP, Azure, etc.).
• Experience with threat modeling, risk assessment, and communicating risk to technical and non-technical audiences.
• Knowledge of identity, access, network fundamentals, including OAuth/OIDC, SAML, TLS, PKI, and secrets management.
• Strong written and verbal communication to influence engineering teams toward secure outcomes.

Responsibilities

• Provide expert security advisory for large-scale cloud initiatives and enterprise architectures across the stack.
• Drive proactive security through architecture and threat modeling, with risk mitigation plans across the SDLC.
• Influence secure design and implementation by partnering with product teams on secure solutions.
• Align security priorities with business risk and with BISOs to curate risk-based security initiatives.

Skills

Cloud security

Threat modeling

Identity & access

Communication

Tools

Kubernetes

Docker

CSPM

SAST

IaC security scanning

Job description

Salesforce is seeking a Senior Product Security Engineer, Infrastructure to fortify the security of our core infrastructure across public cloud and on‑prem environments. You will provide strategic security guidance to engineering teams responsible for foundational services, and you’ll influence architecture and threat modeling across the stack.

You’ll partner with BISOs and product teams to translate risk signals into prioritized security initiatives, while promoting secure SDLC practices and