Senior Enterprise Endpoint Security Architect

Salesforce; Washington; On-site; USD 180,000 - 240,000; Full time

Job summary

Salesforce is seeking a seasoned Enterprise Security Architect to lead the architecture of defense capabilities across endpoints, networks, and cloud services. You will drive the technical vision for EDR/XDR, CSPM/SSPM, and gateway defense while partnering with product and engineering teams.

The role requires deep experience in multi-domain security stacks, vulnerability management, and security tooling integration within a large enterprise environment. Collaboration with Scrum teams is key.

Qualifications

• 15+ years in cybersecurity engineering, network security, and infrastructure defense.
• 8+ years as enterprise security architect overseeing multi-domain defense stacks.
• Expertise with EDR / XDR platforms and Application Control solutions.
• Deep CSPM/SSPM knowledge with tools like Wiz, Prisma Cloud, CrowdStrike.
• Proficient with vulnerability platforms and API-integrated email security tools.
• Knowledge of SWG and Secure Web Gateways (SWG) and related security tech.

Responsibilities

• Lead architectural design for core Enterprise Defense capabilities (EDR/XDR, endpoint protection).
• Own vulnerability management including CTEM and exposure management.
• Design cloud and SaaS posture strategy (CSPM/SSPM).
• Architect messaging and gateway defense (SEG, DMARC, DKIM, SPF).
• Lead network and perimeter defense (SSE, DLP).
• Define and maintain enterprise defense reference architecture and patterns.
• Establish deployment blueprints across on-prem, hybrid, and multi-cloud.

Skills

Cybersecurity architecture

Enterprise security

EDR / XDR

CSPM / SSPM

Vulnerability management

Email security

Security tooling

Tools

CrowdStrike Falcon

Tenable

Qualys

Job description

Salesforce is seeking a seasoned Enterprise Security Architect to lead the architecture of defense capabilities across endpoints, networks, and cloud services. You will drive the technical vision for EDR/XDR, CSPM/SSPM, and gateway defense while partnering with product and engineering teams.

The role requires deep experience in multi-domain security stacks, vulnerability management, and security tooling integration within a large enterprise environment. Collaboration with Scrum teams is key.