# Cloud Security Architect

**Company**: Salesforce
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/Ireland---Dublin/Product-Security-Lead_JR364992?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_77090472-fdf

## Description

You will be the embedded security authority for Salesforce Clouds including e-commerce and marketing area. You will work with engineering, architecture and BISO partners to make the products secure by design and resilient against real-world attacks on AI, APIs and the tenant environment.

Responsibilities:

- Lead security architecture and design reviews, code reviews and threat modeling for Cloud features and services.

- Drive remediation of vulnerabilities from pen tests, bug bounty and ASA findings. Own SLAs and risk acceptance.

- Design and drive controls against Authentication and authorization weaknesses, storefront abuse, credential stuffing, bot traffic and API abuse.

- Partner with Detection & Response on the security with product context.

- Advise on multi-tenant isolation, authentication and authorization, secrets and key management, and PCI-relevant payment flows.

- Act as the escalation point of contact for security incidents and customer security questions as product security advisory. Brief leadership on risk posture. Suggest short term, long term remediation plans.

- Influence Security roadmaps across Commerce and Trust. You will remain close to the code and architecture while multiplying the effectiveness of other security and engineering teams.

- Mentor engineers and security champions, and improve secure SDLC practices.

Requirements:

- 7+ years in application, product or cloud security, with deep knowledge of web and API security (OWASP, OAuth/OIDC, SSO).

- Experience securing e-commerce and SaaS platforms, including payments, headless/storefront architectures.

- Experience reviewing multi-tenant SaaS platforms and enforcing tenant, or organizational data isolation.

- Familiarity with secure software-supply-chain practices, dependency analysis, artifact provenance, build systems, and vulnerability-management workflows.

- Strong threat modeling and secure code review skills. Fluent in Java/JavaScript/Node ecosystems.

- Experience securing Public-cloud infrastructure (AWS/Hyperforce, Kubernetes, GCP) and familiarity with logging and detection pipelines.

- Experience securing AI-enabled product features, including prompt and tool boundaries, data access, agent authorization, and indirect prompt-injection risks.

- Ability to influence senior engineers and leaders without direct authority, and communicate risk clearly.

- A history of responsible vulnerability research, security tooling development.

Benefits:

- Unleash Your Potential: When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best.

## Skills

### Required
- Cloud Security
- Web Security
- API Security
- OWASP
- OAuth/OIDC
- SSO
- Java
- JavaScript
- Node.js
- AWS
- Kubernetes
- GCP
- Threat Modeling
- Secure Code Review

### Nice to have
- Commerce platforms
- Bot mitigation
- Fraud and abuse prevention
- CISSP
- GIAC
- OSCP

---

Source: [Apply at salesforce.wd12.myworkdayjobs.com](https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/Ireland---Dublin/Product-Security-Lead_JR364992?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)