Drimva

Salesforce

Lead Threat Assessment Engineer

$172K–$286K

California - San Francisco +3 · Office Tech-Flexible · Full-time · Posted Oct 8, 2026

Location
California - San Francisco
California - Palo Alto
Washington - Seattle
Washington - Bellevue
Experience
8+ years in threat modeling and security architecture.
Education
Related technical degree required.

About the job

Leads threat assessments across Salesforce infrastructure and applications, translating technical research into security recommendations and scaling team capabilities through automation and agentic tooling.

What you'll do

  • Conduct threat modeling and analyze intelligence, incident telemetry, security logs, and risk signals to identify and manage threats.
  • Translate assessment findings into recommendations and drive security improvements with Product, Enterprise Security, and engineering stakeholders.
  • Mentor analysts and engineers, and develop agentic tooling and alerting capabilities with security partners.

What they ask for

  • 8+ years of experience in threat modeling and security architecture.
  • Strong knowledge of threat actor tactics, offensive strategies, cloud security, and SaaS/PaaS exploitation and abuse threats.
  • Experience with threat modeling frameworks and proficiency analyzing logs from security tools.
  • Related technical degree required.

Nice to have

  • Experience in Product or Enterprise Security design reviews and security assurance.
  • Experience automating processes or using AI tooling to automate workflows and data analysis.

Pay

$172,500 - $260,100 annually (base salary); $207,800 - $285,800 annually (base salary)

Tools

Cyber Kill Chain, Diamond Model, MITRE ATT&CK, STRIDE, OWASP Top 10

AI focus

Designs and orchestrates agentic tooling to expand team analysis capabilities; AI tooling for workflow and data-analysis automation is preferred. Salesforce also uses AI to assist recruiters in candidate assessment, with humans making hiring decisions.

Model-written summary · the original posting is authoritative

First seen Oct 10, 2026 · Last verified Nov 5, 2026 (UTC)