Senior Threat Assessment Engineer

Salesforce

. Conducting threat modeling for infrastructure and application-level threat scenarios, including security architecture and interactions, and new products/features from a realized threat and “outside-in” perspective .

Posted 5/2/2026full-timeSan Francisco • California, Washington • 🇺🇸 United StatesSenior💰 $148,500 - $223,900 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Conducting threat modeling for infrastructure and application-level threat scenarios, including security architecture and interactions, and new products/features from a realized threat and “outside-in” perspective
Create onboarding strategy of all new M&As into Cyber Security Operations across assessments, log prioritization and onboarding, and detection and security tool validation
Utilizing threat intelligence, incident response data, detection and logging metrics, and visibility from proprietary security tooling to conduct and correlate research
Assessing cloud security controls and cloud architecture implementations across current businesses and future business units, primarily across AWS, GCP, and Azure substrates
Analyzing logs from endpoint, network, and other security tooling to identify potential gaps in coverage or hunting for bypassing of existing controls
Engaging executive stakeholders across the company to translate assessments into actionable recommendations that shape the business and our products
Providing strategic and tactical applied threat insights to Security and leadership stakeholders by contextualizing intelligence in the Salesforce context with our Threat Intelligence team

Requirements

What you’ll need

6+ years of experience in threat modeling and security architecture
Strong research and analytical skills with the ability to correlate data from various sources
Proficiency in analyzing logs and events from various security tools like EDR, CSPM, SIEM, etc
In-depth understanding of cloud security and application security fundamentals and best practices (such as OWASP Top 10)
Strong understanding of common exploitation and abuse threats observed across for SaaS and PaaS providers
Experience using threat modeling and analysis frameworks such as Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and STRIDE
Excellent communication skills, both written and oral
A related technical degree required

Benefits

Comp & perks

time off programs
medical
dental
vision
mental health support
paid parental leave
life and disability insurance
401(k)
employee stock purchasing program

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

threat modelingsecurity architecturecloud securityapplication securitylog analysisthreat intelligenceincident responsesecurity controlsthreat modeling frameworksdata correlation

Soft Skills

research skillsanalytical skillscommunication skillsstakeholder engagementactionable recommendations