To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category
Products and Technology

Job Details

Trust is the #1 company value at Salesforce. It's not just words or a slogan: it's part of the beating heart of the company that everyone contributes to every day. We define trust as security, availability, and performance. Delivering new capabilities is one thing, but we must do so while protecting and earning our customer's trust. We ensure this by having our developers embed trust in every product decision and support them with industry leading policies and practices.

The primary goal of the SSDL (Salesforce Secure Development Lifecycle) program is to enable Salesforce to deliver on that promise of trust to our customers.

This role will help develop and execute on a multi-year strategy to embed security seamlessly into our engineering processes to help our developers to deliver secure products while maintaining engineering agility.

We are seeking an individual that is as passionate about security as they are about people. Do you want to be an agent of change? Are you the type of person that seeks out roadblocks or tough organizational issues and views them as an opportunity? Can you look at the big picture and the details? Can you see all the opportunities but still prioritize? Do you enjoy delivering creative technical solutions to complex problems? Do you enjoy streamlining processes to make everyone's life easier and bringing order to chaos all while improving trust? Are you passionate about security and understand that there is always more that should be done than available resources? Does the idea of constantly changing, high impact work excite you? Would you love to work with some of the world's top security talent?

If so, we want to hear from you!

TOP REASONS TO JOIN THE TEAM:

• Executive leadership is fundamentally bought in and driving SDL across all development activities as a key component of how we improve Trust. The visibility, ability to show improvement, and have impact in this role is significant.
• This role is critical to continuing to develop and grow the value proposition for the SDL program. he program is evolving and maturing, and we are open to ideas about this program - we know the outcomes and are looking for someone who will be persistent in adapting tactics to match the cultures of the various parts of Salesforce's engineering workforce.
• Your key partners in Security Assurance are super smart and ingenious. They enjoy working with strong technical program managers and helping bring their ideas to fruition.
• You are treated as a critical member of the team, a valued resource, with valued opinions, and supported in your work by all levels of management.
• We are a transparent organization, where we care about open communication and foster the health of relationships.
• You are joining a World-Class Security organization where you will have the opportunity to learn from so many smart people.
• You will have the opportunity to create innovative programs to support the Salesforce Secure Development Lifecycle.

RESPONSIBILITIES:

• Assist development of and execute on multi-year SDL Program Strategy involving training, tooling, guidance, and process.•
• Continuously evaluate and evolve new service introduction and intake process for Security Assurance. Work with stakeholders external to Security Assurance to create a seamless end to end process for the company.
• Evangelize the SSDL program across Salesforce.
• Empower engineers to own security for their products and services through processes, training, tooling, and automation.
• Translate business objectives into execution strategy (tactical and strategic), lead and successfully execute the strategy through strong collaboration and agile leadership
• Establish feedback loops from other Security Functions to continuously evolve and expand the program's efficacy.
• Develop trusted relationships with key technology, functional leaders, and stakeholders to drive focus on the strategic program objectives and optimize program delivery. This includes supporting and holding resources accountable for their responsibilities within the program
• Ensure data is collected and communicated to appropriately inform decision making for mitigating risks and resolving issues
• Drive a continuous focus on equipping and enabling engineering teams to deliver secure by default solutions.
• Anticipate and aggressively remove obstacles that slow down or prevent programs from delivering on program objectives
• Drive for clarity to keep teams moving forward
• Provide "go to" leadership, transparency and visibility to the entire Technology & Products organization. Seek to continuously grow by proactively seeking and embracing constructive feedback

REQUIREMENTS:

• 7+ years of experience in software security, preferably in a security assurance role at large enterprise preferably in working with cloud / online services
• 5+ years of experience building a roadmap and managing complex programs with people, process, technology components.
• Thorough understanding of Secure Development Lifecycle fundamentals and components
• Ability to walk in the shoes of engineers in order to understand how your program can impact and enable them.
• Track record of successfully building alliances with teams and individuals in a matrixed environment
• Experience in framing, establishing and implementing large-scale (enterprise-level) initiatives
• Ability to establish credibility and rapport with senior executives and technical and non-technical team members alike
• Outstanding detail-oriented organizational skills
• Ability to be flexible with a positive attitude and learn quickly in a dynamic environment
• Substantial emotional intelligence - can balance the needs of the company and read a situation to understand when to forcefully push something, or give it some space
• Self starter and intrinsically motivated with a history of successful project execution
• Influencing skills with an ability to motivate and drive others to succeed
• Ability to understand business and technical requirements, capture and summarize key points, and communicate them at levels appropriate to your audience
• Ability to successfully collaborate with multiple geographically distributed technical functions in the areas of infrastructure, technical operations, software engineering and security
• Information Systems, Computer Science Bachelor's Degree OR equivalent experience

DESIRED SKILLS:

• Thorough understanding of enterprise software development and infrastructure processes and lifecycle; ability to adjust and apply this knowledge in a dynamic environment using agile or similar methodologies
• Past experience driving and managing full lifecycle projects.
• Experience in managing the development of courseware
• CISM and/or CISSP certification
• Ability to see potential and prioritize initiatives to deliver business outcomes
• Experience with creating detailed reporting and dashboards
• Seasoned professional in corporate communications, presentation, and risk awareness
• Experience in driving key information security, compliance and other regulatory requirements internally and externally

For Colorado-based roles: Minimum annual salary of $104,600 for a Program Manager. You may also be entitled to receivebonus, restricted stock units, and benefits.

*LI-Y

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits.

Salesforce.com and Salesforce.org are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce.com and Salesforce.org do not accept unsolicited headhunter and agency resumes. Salesforce.com and Salesforce.org will not pay any third-party agency or company that does not have a signed agreement with Salesforce.com or Salesforce.org.

Salesforce welcomes all.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.

As a federal contractor, Salesforce is required to verify that all US-based employees are fully vaccinated against COVID-19. If you receive an offer and are unable to get vaccinated for religious or medical reasons, you may request a reasonable accommodation.