Hybrid Information Security Principal, Environment Threat Assessment

at Salesforce

• Job title: Information Security Principal, Environment Threat Assessment
• Job type: Full Time
• Experience level: Lead
• Salary: $197,300 - $313,700 per year
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Cloud, Cyber Security, Google Cloud Platform
• Location requirements: Hybrid, San Francisco, United States

About the role

• Principal Threat Assessment Engineer at Salesforce addressing environmental threat assessments and mentoring junior analysts. Engaging with stakeholders to enhance security posture within global infrastructure.

Responsibilities

• Conducting threat modeling for infrastructure and application-level threat scenarios, including security architecture, system interactions, and new products/features from a realized threat and “outside-in” perspective.
• Utilizing threat intelligence, incident response data, detection and logging metrics, and visibility from proprietary security tooling to conduct and correlate research.
• Assessing cloud security controls and cloud architecture implementations across current businesses and future M&As, primarily across AWS, GCP, and Azure substrates.
• Analyzing logs from endpoint, network, and other security tooling to identify potential gaps in coverage or hunting for bypassing of existing controls.
• Engaging executive stakeholders across the company to translate assessments into actionable recommendations that shape the business and our products.
• Driving uplifts identified from security incidents with Product and Enterprise Security partners and serving as an SME for Product teams during design solutioning.
• Providing strategic and tactical applied threat insights to Security and leadership stakeholders by contextualizing threat intelligence in the Salesforce context in partnership with our Threat Intelligence team.
• Collaborating with architects and principals across Cyber Security operations, including Threat Detection and Data Science, to design alerting against realized threats.

Requirements

• 12+ years of experience in threat modeling and security architecture, and/or other CSOC functions like Incident Response, Threat Detection, Threat Intelligence.
• Significant understanding of threat actor tactics and offensive strategies.
• Strong research and analytical skills with the ability to correlate data from various sources.
• Experience using threat modeling and analysis frameworks such as Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and STRIDE.
• In-depth knowledge of cloud security and cloud architecture fundamentals.
• Proficiency in analyzing logs from various security tools.
• Familiarity with application security, specifically with the OWASP Top 10 vulnerabilities.
• Strong understanding of common exploitation and abuse threats observed across for SaaS and PaaS providers.
• Excellent communication skills, both written and oral.
• A related technical degree required.

Benefits

• time off programs
• medical
• dental
• vision
• mental health support
• paid parental leave
• life and disability insurance
• 401(k)
• employee stock purchasing program