Security Systemic Risk Remediation Engineer

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Job Category

Product

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

About Our Team

Salesforce's Product Security team within the broader Security organization is at the forefront of securing our customer data and assets while balancing risk and security posture. We thrive on collaboration with product and engineering teams to drive risk outcomes and help maintain trust for our customers.

Your Impact

This role is on the Security Foundations team within our product security organization, and requires a blend of real-world experience and deep knowledge in software security, including application security, cloud security, secure coding practices, and security architecture, with a specific focus on application and infrastructure risk identification and remediation. These risks may be strategic in nature, impacting multiple products or tools.

This role is focused on proactive discovery and remediation of emerging risk patterns via Attack Surface Management and targeted hands‑on security assessments.

The ideal candidate will have a proven track record of identifying systemic risk through uncovering of underlying common patterns representing systemic flaws, investigating and drafting Root Cause Analyses for complex vulnerabilities, and configuring/analyzing/triaging risk signals from monitoring and detection tooling. This role is responsible for leading investigations into, and coordinating remediation for systemic risks across Salesforce's products.

Responsibilities

• Partnership with Engineering

• Collaborate with Product Management & Engineering teams to drive accountability for implementing mitigation steps across affected areas and to resolve issues at their root cause.

• Drive adoption of proactive security measures and guardrails, such as automated secure coding checks, centralized input validation libraries, and robust access control mechanisms.

• Update organizational standards, policies and procedures as necessary to prevent systemic flaws from being re‑introduced.

• Educate developers on secure coding practices and common systemic flaws.

• Influence Product Management & Engineering roadmaps to drive architectural improvements and adopt secure‑by‑default product features.

Risk Identification & Management

• Review technical design and architecture documentation or source code for product features.

• Triage security findings, alerts or bug reports to find common patterns representing widespread or recurring security issues.

• Identify variants or broadly similar instances of existing security anti‑patterns using commercial, custom, and/or open‑source code and runtime testing tools.

• Validate security issues with a proof‑of‑concept to confirm exploitability when necessary.

• Collaborate with engineers and developers to build context required to pinpoint and articulate risk.

• Develop scalable approaches for risk remediation, mitigation, and prevention. These should include Agentic AI and process automation.

• Collaboration & Influence

• Frame engineering risks to enterprise and other Security partners at levels of seniority up to and including C‑suite leaders.

• Collaborate with other security teams to incorporate lessons learned from risk identification and remediation into proactive controls.

• Engage in executive forums, as necessary, to articulate risk remediation strategies in a manner that resonates with the audience.

• Rapidly adapt to new and emerging high‑risk areas,…