Senior Threat Modeling & Security Architect

salesforce.com, inc.; Seattle (WA); On-site; USD 173,000 - 260,000; Full time

Job summary

Salesforce is seeking a Lead Threat Assessment Engineer to act as a threat modeling expert within the Environmental Threat Assessment team. You will mentor junior analysts and drive automation to scale security capabilities across global infrastructure.

You will translate deep technical research into actionable requirements, engage executives, and shape product and enterprise security decisions. This role sits in Salesforce Security's Cybersecurity Operations Center.

Qualifications

• 8+ years of threat modeling and security architecture experience.
• Familiar with Cyber Kill Chain, Diamond Model, MITRE ATT&CK, STRIDE.
• Experience with cloud security and SaaS/PaaS threat landscape.
• Strong analytical and communication skills.

Responsibilities

• Conduct threat modeling for infrastructure and apps from a threat perspective.
• Correlate research using threat intel and deployment telemetry.
• Analyze logs to identify gaps and hunting for bypasses of controls.
• Translate assessments into actionable recommendations for Product/Engineering.
• Lead and mentor junior analysts; scale with automation and tooling.
• Collaborate with architects and security teams on design solutions.
• Provide threat insights to leadership with Salesforce context.
• Design and orchestrate agentic tooling for analysis capabilities.

Skills

Threat modeling

Security architecture

Threat intelligence

MITRE ATT&CK

OWASP Top 10

Cloud security

Security analytics

Education

Technical degree

Job description

Salesforce is seeking a Lead Threat Assessment Engineer to act as a threat modeling expert within the Environmental Threat Assessment team. You will mentor junior analysts and drive automation to scale security capabilities across global infrastructure.

You will translate deep technical research into actionable requirements, engage executives, and shape product and enterprise security decisions. This role sits in Salesforce Security's Cybersecurity Operations Center.