Senior Cloud Security Engineer, Infrastructure

salesforce.com, inc.; Seattle (WA); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce is seeking a Senior Product Security Engineer, Infrastructure, to fortify the security of our core infrastructure and services across cloud and on‑prem environments. You will provide strategic security guidance to engineering teams and lead threat modeling and risk mitigation efforts.

This role requires 5–8 years of security experience, strong cloud security knowledge, and the ability to influence design choices through clear communication.

Qualifications

• 5-8 years of experience in a security engineering, security architecture, or security assurance role.
• Cloud Security: experience securing products and infrastructure across one or more public cloud environments, with understanding of cloud service models, shared responsibility boundaries, and identity primitives at scale.
• Threat Modeling & Risk Assessment: experience conducting structured security design reviews and threat modeling, familiar with OWASP Top 10 and CWE Top 25.

Responsibilities

• Provide expert security advisory for large-scale cloud initiatives across the application and infrastructure stack.
• Drive proactive security through architecture and threat modeling with SDLC risk plans.
• Influence secure design by collaborating with product teams to balance functional goals with security requirements.
• Align security priorities with business risk with BISOs to curate risk-based security initiatives.

Skills

Cloud Security

Threat Modeling

Identity & Access

Communication

Tools

AWS

GCP

Azure

Kubernetes

Docker

PKI tooling

SAST

CSPM

Job description

Salesforce is seeking a Senior Product Security Engineer, Infrastructure, to fortify the security of our core infrastructure and services across cloud and on‑prem environments. You will provide strategic security guidance to engineering teams and lead threat modeling and risk mitigation efforts.

This role requires 5–8 years of security experience, strong cloud security knowledge, and the ability to influence design choices through clear communication.