Senior Cloud Security Engineer, Infrastructure

salesforce.com, inc.; Palo Alto (CA); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce is seeking a Senior Product Security Engineer, Infrastructure to fortify core infrastructure across public cloud platforms with strategic security guidance for engineering teams.

You will influence secure design, drive risk-based initiatives within the SDLC, and collaborate with BISOs to align security with business goals while supporting scalable, secure product ecosystems.

Qualifications

• 5-8 years of experience in a security engineering, security architecture, or security assurance role.
• Cloud Security: experience securing products and infrastructure across public cloud environments with understanding of shared responsibility and identity primitives.
• Threat Modeling & Risk Assessment: structured security design reviews, threat modeling, awareness of OWASP Top 10 and CWE Top 25, and communication of risk to stakeholders.
• Identity, Access, and Network Fundamentals: knowledge of OAuth/OIDC, SAML, service-to-service auth, TLS, network segmentation, key management, and encryption standards.
• Strong written and verbal communication skills to influence engineering teams toward secure outcomes.

Responsibilities

• Provide expert security advisory for large-scale cloud initiatives, guiding engineering teams on complex architectures across application and infrastructure stacks.
• Drive proactive security through architecture and threat modeling, develop risk mitigation plans across the SDLC.
• Influence secure design by collaborating with product teams to balance functionality with security requirements.
• Align security priorities with business risk by working with BISOs to curate and prioritize risk-based security initiatives.

Skills

Cloud Security

Threat Modeling

Identity & Access

Network Fundamentals

Security Leadership

Tools

Kubernetes

Docker

PKI tooling

SAST

CSPM

Job description

Salesforce is seeking a Senior Product Security Engineer, Infrastructure to fortify core infrastructure across public cloud platforms with strategic security guidance for engineering teams.

You will influence secure design, drive risk-based initiatives within the SDLC, and collaborate with BISOs to align security with business goals while supporting scalable, secure product ecosystems.