Lead Product Security Engineer

About the role

Salesforce is hiring a Lead Product Security Engineer to join its Product Security Advisors team in Tel Aviv, Israel. As the technical authority for the platform behind its clouds, you review designs and recommend fixes, partnering with engineering teams and leaders to build security into every design decision.

Key responsibilities

• Build secure development practices into the full software lifecycle for your product areas so teams can repeat them at scale.
• Lead threat modeling and architecture reviews for data platforms, AI integrations and public-sector deployments to find design flaws early.
• Review source code manually and with automated tools across languages such as Java, C and C++, and guide teams on identity, access control and cloud configuration.
• Advise engineering leaders on security risk in clear business terms, including recommending a delay to launch when critical requirements are not met, and guiding the security plan for a fast platform rebuild while the legacy environment is retired.

Required profile

• 7+ years in product security, application security or security architecture securing enterprise cloud platforms.
• Degree or equivalent relevant experience; experience is evaluated against the core competencies of the role.
• Turns complex vulnerabilities into business risk that stakeholders understand, and is open to using AI tools for security assessments.

Required skills

• Working knowledge of at least two programming languages such as Java, C or C++ and experience reviewing complex code for security flaws.
• Expertise in application, cloud and data security, including the OWASP Top 10 and SANS Top 25, and modern static and dynamic code scanning tools.
• Nice to have: security experience with mergers and acquisitions, offensive security or cloud security certifications, web application penetration testing, bug bounty participation, open-source security contributions, and knowledge of the Salesforce ecosystem.