VP, Security Engineering for Product Security

Role Overview

As the VP of Security Engineering for Product Security , you will lead the vision, strategy, and operational direction for the systemic risk-driven security engineering initiatives that protect Salesforce’s customer-facing products and reduce systemic risk across the Salesforce platform. Trust is our #1 value.

You will partner with both security and engineering executives to design, build, and deploy robust security controls, architectures, and automated tools across our multi-billion dollar platform.

This is a highly visible executive leadership role internally and externally for a seasoned executive who has successfully built and scaled product security programs within a large-scale enterprise technology company (e.g., Tier 1 SaaS, Cloud, or Platform providers).

Core Responsibilities

• Executive Engagement & Collaboration: Partner closely with executive leadership to ensure that all applications and platforms are developed with security in mind and that appropriate security controls are implemented across B2B SaaS environments.
• Engineering Engagement & Governance: Oversee engagement between the extended security organization and product engineering teams, ensuring security policies, procedures, and controls are integrated into standard software development processes.
• Strategic Product Security Program: Develop and oversee a comprehensive product security and risk management strategy designed to protect the integrity, confidentiality, and availability of customer-facing data and applications.
• Technical Security Debt Management: In partnership with product engineering stakeholders, manage and prioritize the technical security debt backlog and associated engineering tasks to best remediate risk.
• Cloud-Native Architecture: Provide executive-level technical guidance on securing multi-cloud environments and embedding security deeply into cloud infrastructure.
• Customer & External Engagement: Serve as an externally facing executive spokesperson to respond to customers, analysts, and stakeholders regarding Salesforce's security programs, building confidence in our products.

Required Qualifications

• Enterprise Experience: 15+ years of experience in information security and technology, with a proven track record of leadership in a large-scale enterprise technology company . It is unlikely a successful candidate will come from a non-enterprise software company background.
• Threat & Attack Vector Expertise: Comprehensive knowledge of cyber threats, SaaS attack vectors, and IT security practices applied to cloud operations at scale.
• Product Security Mastery: Technical credibility and broad expertise in leading cybersecurity and product security programs for global B2B technology companies.
• Technical Credibility: Ability to influence executive leadership and engineering teams through deep technical insight and a history of delivering complex security outcomes.
• People Leadership & Inclusion: Excellent people leadership skills with a proven track record of building, managing, and scaling high-quality, inclusive security organizations.
• Executive & Board Communication: Strong leadership acumen to influence the organization and convey security program health to senior executives, Board members, auditors, and customers.

Ideal Candidate Profile

The successful candidate will likely have served as a VP or Senior Director of Security Engineering, or Software Engineering at a global technology firm. They should possess deep technical and engineering depth to partner with world-class product and infrastructure teams, combined with strategic leadership to scale security engineering programs across an enterprise.