Lead Product Security Engineer
Core
Technical authority reviewing designs and recommending fixes for Salesforce's cloud platform, building security into every design decision.
Role type
Senior IC product security engineer (cloud platform)
Builds
Secure development practices for the full software lifecycle across data platforms, AI integrations, and public-sector deployments
Domain
Cloud security, application security, data security
Required skills
threat modeling, architecture review, manual and automated code review (Java, C, C++), identity and access control, cloud configuration, OWASP Top 10, SANS Top 25, static and dynamic code scanning, translating vulnerabilities to business risk
Preferred skills
mergers and acquisitions security experience, legacy system retirement, offensive security, cloud security certifications, web application penetration testing, bug bounty participation, open-source security contributions, Salesforce ecosystem knowledge
Technologies
Java, C, C++, OWASP Top 10, SANS Top 25, static code scanning tools, dynamic code scanning tools
Responsibilities
Build secure development practices into the full software lifecycle; Lead threat modeling and architecture reviews for data platforms, AI integrations, and public-sector deployments; Review source code with manual and automated methods; Advise engineering leaders on security risk in clear business terms
Seniority
Senior, hands-on IC
