Salesforce's Product Security team within the broader Security organization is at the forefront of securing our customer data and assets while balancing risk and security posture. We thrive on collaboration with product and engineering teams to drive risk outcomes and help maintain trust for our customers.
Your Impact – Responsibilities
This role is on the Security Foundations team within our product security organization, and requires a blend of real-world experience and deep knowledge in software security, including application security, cloud security, secure coding practices, and security architecture, with a specific focus on application and infrastructure risk identification and remediation. These risks may be strategic in nature, impacting multiple products or tools.
This role is focused on proactive discovery and remediation of emerging risk patterns via Attack Surface Management and targeted hands-on security assessments.
The ideal candidate will have a proven track record of identifying systemic risk through uncovering of underlying common patterns representing systemic flaws, investigating and drafting Root Cause Analyses for complex vulnerabilities, and configuring/analyzing/triaging risk signals from monitoring and detection tooling. This role is responsible for leading investigations into, and coordinating remediation for systemic risks across Salesforce’s products.
Partnership with Engineering
Collaborate with Product Management & Engineering teams to drive accountability for implementing mitigation steps across affected areas and to resolve issues at their root cause.
Drive adoption of proactive security measures and guardrails, such as automated secure coding checks, centralized input validation libraries, and robust access control mechanisms.
Update organizational standards, policies and procedures as necessary to prevent systemic flaws from being re-introduced.
Educate developers on secure coding practices and common systemic