Senior Cloud Infrastructure Security Engineer

salesforce.com, inc.; Seattle (WA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Product Security Engineer for Infrastructure to fortify core services across on-prem and cloud environments. You will provide security guidance to engineering teams, influence design, and help implement SSDL best practices.

This role requires 3–5 years in security engineering or architecture, strong cloud security knowledge across AWS/GCP/Azure, and the ability to communicate risk to technical and non-technical stakeholders.

Qualifications

• 3–5 years of experience in a security engineering, security architecture, or security assurance role.
• Cloud Security: experience securing products and infrastructure across one or more public cloud environments with knowledge of cloud service models and identity primitives at scale.
• Threat Modeling & Risk Assessment: experience with structured security design reviews and threat modeling across infra and app security domains; familiarity with OWASP Top 10 & CWE Top 25.

Responsibilities

• Provide expert security advisory for large-scale cloud initiatives and guide engineering teams on complex enterprise architectures.
• Drive proactive security through architecture and threat modeling; identify vulnerabilities and develop risk mitigation plans across the SDLC.
• Influence secure design and implementation by collaborating with product teams to balance functionality with security requirements.
• Align security priorities with business risk by working with BISOs to curate risk-based security initiatives and by analyzing risk signals and threats.

Skills

Cloud security

Threat modeling

IAM & network fundamentals

Security advisory communication

Kubernetes

Docker

Istio

CSPM

SAST

Tools

Kubernetes

Docker

Istio

CSPM

SAST

Job description

Salesforce is seeking a Product Security Engineer for Infrastructure to fortify core services across on-prem and cloud environments. You will provide security guidance to engineering teams, influence design, and help implement SSDL best practices.

This role requires 3–5 years in security engineering or architecture, strong cloud security knowledge across AWS/GCP/Azure, and the ability to communicate risk to technical and non-technical stakeholders.