Product Security Engineer

About the role

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category Product

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Job Title: Product Security Engineer, Infrastructure

Job Category: Technology / Security

Location: San Francisco, CA or Bellevue, WA

The Experience

Join our Infrastructure Product Security Assurance team as a Product Security Engineer, where you play a pivotal role in fortifying the bedrock of Salesforce's entire product ecosystem. In this highly impactful position, you leverage deep technical expertise to provide strategic security guidance and leadership to engineering teams responsible for our foundational services, including technical controls, infrastructure databases, and monitoring tools across public cloud platforms.

As a trusted security engineer, you serve as the primary point of contact for engineering partners and leadership, cultivating strong relationships and delivering critical security recommendations. Your contributions directly shape and enhance the security posture of our core infrastructure platforms, ensuring the resilience and integrity of Salesforce's offerings.

Our team specializes in providing deep architectural and infrastructure security expertise across a diverse range of technologies, both on-premises and in public cloud environments, including web applications, distributed systems, and virtualized infrastructures. You champion secure software development lifecycle (SSDL) best practices, empowering engineering teams to build secure products from the ground up.

What You'll Actually Be Doing

- Provide expert security advisory for large-scale cloud initiatives, offering strategic guidance to engineering teams on complex enterprise architectures across the application and infrastructure stack.

- Drive proactive security through architecture and threat modeling, partnering with engineering teams to identify vulnerabilities and develop risk mitigation plans throughout the software development lifecycle (SDLC).

- Influence secure design and implementation by collaborating with product teams to recommend design solutions that balance functional goals with security requirements.

- Align security priorities with business risk by working with Product Business Information Security Officers (BISOs) to curate and prioritize risk-based security initiatives, and by analyzing risk signals and emerging threats to shape security roadmaps.