- Level
- Senior
- Experience
- 7+ years
- Work style
- On-site
- Full-time
- Area
- Security engineering
At a glance
The role in plain English
This role leads product security for Salesforce's platform in Dublin, working closely with engineering teams to embed security into software design and development. The position suits experienced security engineers with a strong background in application and cloud security, code review, and risk communication. Day-to-day tasks include threat modelling, architecture reviews, source code analysis, and advising leaders on security risks and mitigation strategies.
What you'll do
- Embed secure development practices into the software lifecycle
- Lead threat modelling and architecture reviews for platforms and integrations
- Review source code for security flaws using manual and automated methods
- Advise engineering leaders on security risks and recommend mitigation actions
What they're looking for
Essential
- 7+ years in product, application, or security architecture
- Experience securing enterprise cloud platforms
- Knowledge of at least two programming languages (e.g. Java, C, C++)
- Expertise in application, cloud, and data security
- Familiarity with OWASP Top 10, SANS Top 25, and code scanning tools
Nice to have
- Security experience with mergers and acquisitions
- Offensive security or cloud security certification
- Bug bounty or open-source security contributions
- Knowledge of the Salesforce ecosystem
Core skills
- Threat modelling
- Code review
- Cloud security
- Application security
- Risk communication
- Static analysis
- Dynamic analysis
The shape of the job
Technical depth
4/5
Pace
3/5
Ownership
4/5
Teamwork
4/5
Cyberend's reading of the listing, not the employer's own scores.
Application toolkit
Make your application count
See which requirements your CV meets and what is missing.
Your CV is used for this answer only and never stored.
Questions to prepare for
- 01Describe your approach to threat modelling for a new cloud service.
- 02How do you communicate security risks to non-technical stakeholders?
- 03What steps do you take when reviewing source code for security vulnerabilities?
- 04Can you give an example of embedding secure practices into a software development lifecycle?
About Salesforce
Salesforce develops cloud-based software platforms and services for businesses, with a focus on customer relationship management and AI integration.
Full job descriptionAs published by Salesforce
To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.
Job Category
Software Engineering
Job Details
About Salesforce
Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.
Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.
The Experience
Join the Salesforce Product Security Advisors team in Dublin, Ireland, as the technical authority who reviews designs and recommends fixes for the platform behind our clouds. You partner with engineering teams and leaders to build security into every design decision, and your advice directly strengthens the trust our customers place in Salesforce.
What You'll Actually Be Doing
- Build secure development practices into the full software lifecycle for your product areas, so that teams can repeat them at scale.
- Lead threat modeling and architecture reviews for data platforms, AI integrations, and public-sector deployments to find design flaws early.
- Review source code with manual and automated methods across languages such as Java, C, and C++, and guide teams on identity, access control, and cloud configuration.
- Advise engineering leaders on security risk in clear business terms, including recommending a delay to launch when critical requirements are not met, and guide the security plan for a fast platform rebuild while the legacy environment is retired.
You're Our Person If...
- You have 7+ years in product security, application security, or security architecture, securing enterprise cloud platforms.
- You have working knowledge of at least two programming languages, such as Java, C, or C++, and experience reviewing complex code for security flaws.
- You know application, cloud, and data security, including how they connect, and you are an expert in the OWASP Top 10 and SANS Top 25 and in modern static and dynamic code scanning tools.
- You turn complex vulnerabilities into business risk that stakeholders understand, and you are open to using AI tools to deliver better security assessments.
- Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.)
Even Better If...
- You have security experience with mergers and acquisitions, including retiring legacy systems and moving platforms quickly.
- You hold an offensive security or cloud security certification, or you have web application penetration testing experience.
- You take part in bug bounty programs or contribute to open-source security tools or research.
- You know the Salesforce ecosystem.
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best , and our AI agents accelerate your impact so you can do your best . Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
Accommodations
If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form .
Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.
Posting Statement
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
