Lead Product Security Engineer

The Experience

Join the Salesforce Product Security Advisors team in Dublin, Ireland, as the technical authority who reviews designs and recommends fixes for the platform behind our clouds. You partner with engineering teams and leaders to build security into every design decision, and your advice directly strengthens the trust our customers place in Salesforce.

What You'll Actually Be Doing

• Build secure development practices into the full software lifecycle for your product areas, so that teams can repeat them at scale.
• Lead threat modeling and architecture reviews for data platforms, AI integrations, and public-sector deployments to find design flaws early.
• Review source code with manual and automated methods across languages such as Java, C, and C++, and guide teams on identity, access control, and cloud configuration.
• Advise engineering leaders on security risk in clear business terms, including recommending a delay to launch when critical requirements are not met, and guide the security plan for a fast platform rebuild while the legacy environment is retired.

You're Our Person If...

• You have 7+ years in product security, application security, or security architecture, securing enterprise cloud platforms.
• You have working knowledge of at least two programming languages, such as Java, C, or C++, and experience reviewing complex code for security flaws.
• You know application, cloud, and data security, including how they connect, and you are an expert in the OWASP Top 10 and SANS Top 25 and in modern static and dynamic code scanning tools.
• You turn complex vulnerabilities into business risk that stakeholders understand, and you are open to using AI tools to deliver better security assessments.
• Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.)

Even Better If...

• You have security experience with mergers and acquisitions, including retiring legacy systems and moving platforms quickly.
• You hold an offensive security or cloud security certification, or you have web application penetration testing experience.
• You take part in bug bounty programs or contribute to open-source security tools or research.
• You know the Salesforce ecosystem.