Senior Threat Assessment Engineer

Overview

As a Senior Threat Assessment Engineer on the Environmental Threat Assessment team, you will utilize threat and detection/response perspectives to lead independent assessments into new M&As, major product releases, incident uplifts, etc., to identify and mitigate exploitable vectors. You will collaborate with peers across intelligence, detection, and response functions to drive uplifts and scale our capabilities through automation and agentic security investments.

Your work will directly shape Salesforce's security posture by translating technical research into actionable requirements for Product & Enterprise Security partners and Product/Engineering stakeholders.

• Conduct threat modeling for infrastructure and application-level threat scenarios, including security architecture and interactions, and new products/features from a realized threat and outside-in perspective.
• Create onboarding strategy for all new M&As into Cyber Security Operations across assessments, log prioritization and onboarding, and detection and security tool validation.
• Utilize threat intelligence, incident response data, detection and logging metrics, and visibility from proprietary security tooling to conduct and correlate research.
• Assess cloud security controls and cloud architecture implementations across current businesses and future business units, primarily across AWS, GCP, and Azure substrates.
• Analyze logs from endpoint, network, and other security tooling to identify potential gaps in coverage or hunting for bypassing of existing controls.
• Engage executive stakeholders across the company to translate assessments into actionable recommendations that shape the business and our products.
• Provide strategic and tactical applied threat insights to Security and leadership stakeholders by contextualizing intelligence in the Salesforce context with our Threat Intelligence team.

• 6+ years of experience in threat modeling and security architecture.
• Strong research and analytical skills with the ability to correlate data from various sources.
• Proficiency in analyzing logs and events from various security tools like EDR, CSPM, SIEM, etc.
• In-depth understanding of cloud security and application security fundamentals and best practices (such as OWASP Top 10).
• Strong understanding of common exploitation and abuse threats observed across SaaS and PaaS providers.
• Experience using threat modeling and analysis frameworks such as Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and STRIDE.
• Excellent communication skills, both written and oral.
• A related technical degree required.

• Experience in Product or Enterprise Security design reviews and security assurance.
• Experience automating processes and/or using AI tooling to automate workflows and data analysis.

Accommodations and privacy information, as well as equal opportunity statements, are available per Salesforce policy. Salary ranges are provided for transparency where required by law.