S

Salesforce

Builds cloud software for customer relationships

Lead Threat Assessment Engineer

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • At least 8 years of experience in threat modeling and security architecture.
  • Significant understanding of threat actor tactics and offensive strategies, with the ability to research, analyze, and correlate data from various sources.
  • Experience using threat modeling and analysis frameworks such as Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and STRIDE, and familiarity with application security, specifically OWASP Top 10 vulnerabilities.
  • In-depth knowledge of cloud security and cloud architecture fundamentals, and a strong understanding of common exploitation and abuse threats observed across SaaS and PaaS providers.
  • Proficiency in analyzing logs from various security tools.
  • A related technical degree is required.

Responsibilities

  • Conduct threat modeling for infrastructure and application-level scenarios, including security architecture, system interactions, and new products or features from an observed or realized threat and outside-in perspective.
  • Use threat intelligence, incident response and detection telemetry, proprietary security tooling, and internal security and risk signals to correlate research and manage Salesforce’s top threats program.
  • Analyze logs from endpoint, network, and other security tooling to identify potential coverage gaps or hunt for bypasses of existing controls across new and existing business units.
  • Engage executive stakeholders across the company to translate assessments into actionable recommendations that shape the business and its products.
  • Drive uplifts identified from security incidents with Product and Enterprise Security partners, and serve as a subject matter expert for Product teams during design solutioning.
  • Design and orchestrate agentic tooling for the team’s analysis capabilities and projects, supported by frontier harnesses, organization-specific skills, and human workflows.
  • Provide strategic and tactical applied threat insights to Security and leadership stakeholders by contextualizing intelligence within Salesforce in partnership with Threat Intelligence.
  • Collaborate with architects and principals across Cyber Security operations, including Threat Detection and Data Science, to design alerts against realized threats.
  • Mentor a team of junior analysts and engineers and help scale team capabilities through automation and agentic security investments.

Desired Qualifications

  • Experience in Product or Enterprise Security design reviews and security assurance.
  • Experience automating processes and/or using artificial intelligence tooling to automate workflows and data analysis.

About the Company

Salesforce

Builds cloud software for customer relationships

Salesforce sells cloud software that helps businesses manage sales leads, customer service, marketing, and online commerce from shared customer records. Its flagship Sales Cloud tracks accounts and deals, while Service Cloud organizes support cases and Agentforce builds AI assistants that act on company data. Teams access these tools through a browser and connect outside apps and data sources, with Slack for work messages and Tableau for visual analysis. Salesforce earns most of its revenue from software subscriptions and support, with professional services for implementation and training. Marc Benioff co-founded Salesforce in 1999, and its headquarters are in San Francisco, California.

Company size
10,001+
Company stage
IPO
Headquarters
San Francisco, CA
Founded
1999

Recently Posted Jobs

Explore more opportunities at Salesforce

See more jobs