Security Practices Director

Salesforce

. Lead and validate technical security engagements for enterprise customers using AppSec expertise .

Posted 10/15/2026full-timeRemote • United StatesLead💰 $171,200 - $273,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive AppSec expertise with a focus on secure SDLC, vulnerability management, and threat modeling. Capable of leading technical security engagements and advising on application vulnerabilities while effectively communicating with C-suite executives.

Highest-signal resume keywords

AppSec ExpertiseOWASP Top 10 KnowledgeSaaS Security ImplementationSecurity Certifications (CISSP, OSCP)Executive Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementThreat ModelingPenetration TestingConfiguration HardeningIdentity Access Management (IAM)API SecurityRisk-Based RemediationZero-Trust ArchitecturesOperational Security HygieneSalesforce Platform Familiarity

Soft Skills

MentoringTrusted AdvisorClient-Facing Engagement Skills

Tools & Technologies

Single Sign-On (SSO)Multi-Factor Authentication (MFA)OAuthCSPM

Certifications & Qualifications

CISSPOSCP

Industry Keywords

Application SecurityEnterprise Security EngagementsProfessional ServicesBig 4 ExperienceShared-Responsibility Model

Tech Stack

Tools & technologies

SDLC

About the role

Key responsibilities & impact

Lead and validate technical security engagements for enterprise customers using AppSec expertise
Identify and advise on application vulnerabilities including OWASP Top 10, injection, broken access control, SSRF, and insecure deserialization
Advise customers on secure SaaS implementation and day-to-day use, including configuration hardening, access/identity management, SSO, MFA, OAuth, integration and API security, data protection, and operational security hygiene
Translate AppSec findings into prioritized, risk-based remediation roadmaps
Lead end-to-end security engagement delivery, including scoping, staffing, timelines, and risk ownership
Partner with account teams and sales leadership on pre-sales discovery, solution scoping, SOW development, and executive presentations
Act as trusted advisor to C-suite and senior security stakeholders
Oversee delivery teams to ensure consistent methodology and quality
Develop reusable delivery accelerators, methodologies, and playbooks
Mentor practice staff on security substance and client-facing engagement skills

Requirements

What you’ll need

7–12+ years of AppSec experience in secure SDLC, vulnerability management, threat modeling, and pen testing
Deep working knowledge of the OWASP Top 10 and common application-layer vulnerability classes
Practical understanding of SaaS platform security, including configuration hardening, IAM, API/integration security, and the shared-responsibility model
Strong executive communication and presence; comfortable with CISO/CTO-level conversations
Security certifications strongly preferred, including CISSP, OSCP, or equivalent AppSec certifications
Familiarity with the Salesforce Platform and Salesforce-specific certifications is nice to have
Prior consulting/professional-services engagement management experience is nice to have
Experience with zero-trust architectures or CSPM in SaaS environments is nice to have
Big 4 or equivalent professional services tenure is nice to have

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Incentive compensation may be available for eligible roles
Equity may be available for eligible roles
Reasonable accommodations during the application or recruiting process