On a day-to-day basis, you will be responsible for leading the architectural design of our security systems, driving threat modeling across product engineering teams, and building automated security tooling into our CI/CD pipelines. Specifically, you will:
Architect Security Solutions: Design, implement, and maintain enterprise-grade security infrastructure (e.g., identity and access management, cloud security posture management, encryption services, and network defenses).
Drive DevSecOps Automation: Build and scale automated security testing (SAST/DAST/SCA) directly into our deployment pipelines to catch vulnerabilities early and enable developers to ship code securely.
Lead Threat Modeling & Reviews: Partner closely with Product Engineering architects during the design phase of new features to identify security risks, perform threat modeling, and define mitigation strategies.
Incident Response & Engineering: Act as a tier-3 technical escalation point for complex security incidents, leading deep-dive forensics, root-cause analyses, and building long-term engineering fixes to prevent recurrence.
Set Technical Direction: Define and drive multi-quarter security architecture strategy and roadmap, partnering with Security and Engineering leadership to prioritize investments by risk and business impact.
Scale Through Others: Establish secure-by-default patterns, paved roads, and reusable guardrails that let engineering teams build securely without a security engineer in the loop.
In addition to working with amazing colleagues who exemplify our ‘team over self’ core value, you will also have the opportunity to scale the security posture of an industry-leading revenue workflow platform that handles highly sensitive data for the world's largest enterprises. You will have an opportunity to make a difference.
WHAT WE’RE LOOKING FOR
We are seeking a highly technical, visionary, and proactive security leader who combines deep domain expertise with a passion for building scalable infrastructure. You are someone who thinks like an attacker but builds like a defender, with the technical credibility to influence product engineering teams and the strategic mindset to align security initiatives with business growth. If you’re looking for an opportunity to shape security strategy and scale your impact across the company, then becoming a Staff Security Engineer is the career path for you!
THE TEAM
Our Salesloft Security Engineering team is comprised of seasoned and up-and-coming security architects, researchers, and engineers who are all aligned on one vision and mission:
Vision: Fundamentally transform the way buyers and sellers drive repeatable outcomes
Mission: Bring science to the art of sales
The Security Engineering team consists of results-oriented SaaS engineering professionals with a deep passion for defense-in-depth and engineering-led security. The engineers on our team share a few common traits: they are deeply curious, highly analytical, collaborative, and passionate about protecting our customer data while maintaining engineering velocity.
THE SKILL SET
8+ years of dedicated professional experience in Security Engineering, Application Security, or Cloud Security within a cloud-native SaaS environment.
Advanced expertise in securing public cloud infrastructure (specifically AWS, GCP, or Azure), containerized environments (Kubernetes, Docker), and Infrastructure-as-Code (Terraform).
Deep understanding of secure coding practices, modern cryptography, web application vulnerabilities (OWASP Top 10), and foundational networking security protocols.
Proven experience building and automating security checks into CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins) using Python, Go, or shell scripting.
Strong capability to run detailed threat modeling exercises and security architecture reviews across highly complex, distributed systems.
Exceptional communication skills with a proven track record of mentoring engineers at all levels and translating complex security risks into actionable technical requirements for developers.
Demonstrated experience leading cross-functional security initiatives from proposal through adoption, including securing buy-in from engineering and executive stakeholders.
Ability to make and document sound risk-based tradeoff decisions in ambiguous situations.
Collaborative mentality by prioritizing ‘we’ and not focusing on ‘me’.
Familiarity with AI/LLM security risks and emerging best practices, with the ability to help engineering teams design guardrails for AI-enabled features and agentic workflows.
Relevant certifications (e.g., CISSP, CCSP, GIAC certifications such as GCSA or GCPN, or cloud security specialty certifications) are a plus, though not required.
At Salesloft, we are committed to creating an inclusive and supportive workplace where everyone belongs and can thrive. We focus on culture add, not culture fit, and believe our teams are made stronger by the unique perspectives, experiences, and identities each person brings.
We are proud to be an Equal Opportunity Employer and provide employment opportunities to all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, pregnancy, or any other characteristic protected by law.
If you’re excited about this role even though your experience may not perfectly match every requirement, we encourage you to apply. We are actively hiring across multiple geographies and would love to welcome passionate, curious, and mission-driven individuals to our growing team. Explore our open roles and consider joining us!
#LI-Hybrid
Please note that all official communication regarding job opportunities at Salesloft will come from @ salesloft.com email address. If you receive messages on LinkedIn or other job platforms claiming to be from Salesloft, they may not be legitimate. To verify the authenticity of any job-related communication, please visit our official Careers Page.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, notetaking, or summarizing responses. These tools assist our recruitment team but do not replace human judgment — all hiring decisions are made by people. If you would like more information about how your data is processed or prefer to opt out of any AI-assisted tools, please let your recruiter know. Opting out will not impact your experience or consideration.
