Lead Threat Assessment Engineer

What you'll do

• Conduct threat modeling for infrastructure and application-level scenarios including security architecture and new product features.
• Analyze logs from endpoint, network, and security tooling to identify coverage gaps or control bypasses.
• Translate technical research into actionable security requirements for Product, Engineering, and Enterprise Security stakeholders.
• Design and orchestrate new agentic tooling to automate team analysis capabilities and workflows.
• Provide strategic threat insights to leadership by contextualizing intelligence within the Salesforce environment.
• Drive security uplifts based on incident findings in partnership with Product and Enterprise Security teams.
• Mentor a team of junior analysts and engineers to scale threat assessment capabilities.
• Collaborate with architects to design alerts against realized threats using threat intelligence and detection telemetry.

What we're looking for

• 8+ years of experience in threat modeling and security architecture.
• Significant understanding of threat actor tactics, offensive strategies, and research and analytical skills.
• Experience using frameworks such as Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and STRIDE.
• Familiarity with application security, specifically the OWASP Top 10 vulnerabilities.
• In-depth knowledge of cloud security, cloud architecture fundamentals, and common SaaS/PaaS exploitation threats.
• Proficiency in analyzing logs from various security tools.
• A related technical degree.
• Experience in Product or Enterprise Security design reviews and security assurance (preferred).
• Experience automating processes and/or using AI tooling to automate workflows and data analysis (preferred).