Senior Infrastructure Security Engineer — Cloud & Threat Modeling

Salesforce, Inc.; San Francisco (CA); On-site; USD 178,000 - 246,000; Full time

Job summary

Salesforce, Inc. is seeking a Senior Product Security Engineer, Infrastructure to fortify our core services across cloud and on‑prem environments.

You will provide strategic security guidance to engineering teams responsible for foundational services, databases, and monitoring tools. You will drive threat modeling, secure design reviews, and risk-based security roadmaps, partnering with BISOs and product teams to balance security with business goals.

Qualifications

• 5-8 years of experience in security engineering, security architecture, or security assurance.
• Experience securing products and infrastructure across one or more public cloud environments (AWS, GCP, Azure) with scale.
• Experience with threat modeling, SDLC security reviews, and risk-based security planning.
• Knowledge of OAuth/OIDC, SAML, API security, and IAM patterns at scale.
• Ability to communicate risk to technical and non-technical audiences and influence engineering teams.

Responsibilities

• Provide expert security advisory for large-scale cloud initiatives and architecture reviews.
• Lead threat modeling and risk mitigation across the SDLC.
• Influence secure design and implementation with product teams balancing security and functionality.
• Align security priorities with business risk with BISOs for roadmaps and initiatives.
• Work with code and security tooling (Java/Go/Python) and container tech (Kubernetes) to improve security posture.

Skills

Security engineering

Cloud security

Threat modeling

Identity & access management

Vulnerability assessment

Tools

Kubernetes

SAST

PKI tooling

CSPM

Job description

Salesforce, Inc. is seeking a Senior Product Security Engineer, Infrastructure to fortify our core services across cloud and on‑prem environments.

You will provide strategic security guidance to engineering teams responsible for foundational services, databases, and monitoring tools. You will drive threat modeling, secure design reviews, and risk-based security roadmaps, partnering with BISOs and product teams to balance security with business goals.