Senior Director of Security Engineering (Slack)

Salesforce, Inc.; San Francisco (CA); On-site; USD 260,000 - 360,000; Full time

Benefits offered by this job

Medical Care

Life Insurance

Retirement Savings

Employee Assistance Programs

13 paid days off

Job summary

Slack seeks a transformative Senior Director of Security Engineering to evolve its security posture for AI-enabled workflows and autonomous agents. You will lead a globally distributed team responsible for platform defense, product security, IAM, and incident response, ensuring the platform remains trusted for humans and AI agents alike.

You will drive proactive security strategy, threat intelligence, and security‑as‑code practices, collaborating with Slack and Salesforce stakeholders to outpace

Qualifications

• 15+ years of cybersecurity experience across multiple domains.
• Proven leadership of security teams at scale.
• Experience securing AI/ML systems and agent-based platforms.

Responsibilities

• Define and execute Slack's end‑to‑end security vision and roadmap.
• Lead a globally distributed security engineering organization.
• Collaborate with Product, Engineering, Legal, and Compliance to secure Slack and AI agents.
• Serve as Incident Commander for critical security incidents and drive post‑incident learning.

Skills

Security leadership

Incident response

AI/ML security

Threat intelligence

Crisis management

Cross-functional leadership

Security architecture

Education

Related technical degree

Job description

• We are seeking a transformative security leader who can evolve Slack’s security posture from protecting a messaging platform to securing an AI work OS where autonomous agents are first-class actors
• As Senior Director of Security Engineering, you will lead a globally distributed security organization and own the full spectrum — from platform defense and incident response through product security, identity, and the emerging discipline of AI/agent security
• You’ll partner across Slack and Salesforce to ensure Slack remains the most trusted platform for both human users and the autonomous AI agents they deploy
• This is not a maintenance role. We need someone who sees around corners, builds teams that move faster than adversaries, and has the conviction to drive a security program that’s as forward-looking as the product it protects
• Architect security for the agentic era — Define and execute the end-to-end security vision and roadmap for Slack. You will continuously evolve our security posture to stay ahead of sophisticated, AI-driven threat actors by establishing a complete security model for AI agents operating on Slack with clear benchmarks, driving accountability, and aligning platform defense with broader enterprise business goals. Evolve Slack’s identity and access management to consider emerging zero trust agentic use cases
• Build AI-powered defense capabilities — Evolve our AI and ML-driven detection, threat hunting, and automated response systems that stay ahead of the AI-augmented adversaries doubling down on proactive, autonomous threat detection that leverages LLMs to correlate signals across Slack’s infrastructure at machine speed
• Transform the SDLC security model — Evolve from gate-based security reviews to security-as-code that makes the safe path the easy path for every engineer — including AI coding agents
• Own and execute the end-to-end Slack Security program across Platform Defense, Product Security, Infrastructure Protection, IAM, Vulnerability Management, and Security Incident Response
• Lead and scale a globally distributed security engineering organization, hiring, developing and retaining top talent including senior security leaders and senior level ICs
• Serve as Incident Commander for critical security incidents, providing strategic counsel to executive leadership and ensuring efficient recovery with thorough post-incident learning
• Collaborate closely with executive peers across Product, Engineering, Legal, and cross-functional security groups to champion Slack Security, ensuring Slack remains the most trusted and secure platform for users and autonomous AI agents alike
• Proactively benchmark Slack’s security posture against industry peers and establish Slack Security as a world-class program that the industry looks to as a reference
• Cultivate a security culture across the broader engineering org — making every engineer a security partner through training, tooling, and incentive alignment

Benefits

• Medical Care
• Life Insurance
• Retirement Savings
• Employee Assistance Programs
• With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year

Technical depth combined with strategic versatility — comfortable shifting between board-level security strategy and hands‑on architecture reviews15+ years of broad cybersecurity experience spanning multiple security domains (infrastructure security, application security, incident response, identity, threat intelligence), with at least 8+ years in senior leadership roles managing managers and coaching senior leadersDeep expertise in crisis management and incident response, with demonstrated experience leading remediation of major incidents across both product and enterprise environmentsExcellent cross-functional leadership skills, with experience driving alignment across Product, Engineering, Legal, and Compliance without direct authority over all partiesProven track record building and scaling enterprise security programs at consumer or enterprise SaaS scale — not just running existing programs, but transforming them in response to fundamental shifts in the threat landscapeExperience leading through organizational change — uniting globally distributed, cross‑functional teams into a cohesive, high‑performing security cultureA related technical degree requiredExperience securing AI/ML systems, LLM‑powered features, or agentic platforms — including threat modeling for prompt injection, tool‑use authorization, agent data access, and AI supply chain risksTrack record deploying AI/ML for defensive security — automated threat detection, LLM‑assisted threat hunting, anomaly detection at scale, or autonomous incident responseExperience with high‑assurance compliance frameworks such as FedRAMP High and DoD Impact Level 5 (IL5), ideally in a product that had to maintain velocity while meeting these barsDeep familiarity with threat intelligence methodologies and active threat actor TTPs in the tech industry, with experience leading investigations to evict sophisticated threat actors from complex distributed environmentsExperience securing platform ecosystems where third‑party developers, integrations, or agents extend the attack surface beyond your direct controlRecognized thought leader in the security community — conference speaker, published researcher, or contributor to security standards and frameworks