Director, Platform Defense and Safety

Salesforce•McLean, VA

4d•Onsite

About The Position

The Director of Platform Defense and Safety leads our mission to protect Salesforce, its customers, and the broader internet community from fraud and abuse. As a senior leader within the Cybersecurity Operations Center (CSOC), you define high-priority risks, coordinate multi-layered prevention strategies, and ensure operational continuity across Sales, Service, and Marketing Clouds. This is a rare opportunity to shape the security posture of one of the world's most trusted platforms — and build the team that defends it. This role is part of the Salesforce Cybersecurity organization, based in San Francisco, Bellevue or Mclean.

Requirements

10+ years of experience in information security domains such as trust and safety, threat intelligence, incident response, or platform abuse.
Proven track record of managing technical teams and mentoring team members through complex, fast-moving security environments.
Ability to drive critical security initiatives and gain buy-in from senior leadership for high-impact results.

Nice To Haves

Experience with large-scale data processing and analysis platforms.
Familiarity with Salesforce products and platform architecture.
Background in vendor management and optimizing anti-fraud tooling at scale.
Deep understanding of the product fraud and abuse landscape, including cloud security, threat intelligence frameworks, and compliance with global regulatory mandates such as the EU Digital Services Act (DSA) and U.S. CAN-SPAM Act.

Responsibilities

Lead a geographically dispersed team of subject matter experts (SMEs) dedicated to identifying and removing fraud and abuse across Salesforce platforms.
Partner with leadership across Product Security, Engineering, and Marketing to influence platform safeguards and build resilient defenses against complex abuse patterns.
Oversee proactive threat hunting and the development of detection capabilities to identify and mitigate known signals of platform misuse.
Serve as the primary point of contact for external partners and internal stakeholders to align global response following high-severity incidents.