Associate Security Consultant

About the Role

The Associate Security Consultant – PSSA role is part of the growing Professional Services Security Assurance (PSSA) team within the Security Practice. This team provides customers with hands-on assistance in securing their Salesforce implementations, aiming to deliver secure implementations and protect customer data at scale.

Role Overview

You will support customer-facing security engagements, learn standardized assessment execution, and translate technical risks into clear, actionable guidance. Senior consultants will provide mentorship.

Key Responsibilities

• Execute standardized security assessment methodologies for customer implementations, covering web, API, cloud, and AI-enabled applications.
• Assist with post-sale and deployment security configuration reviews, including identity and access management (IAM) posture and integration risks.
• Produce customer-facing deliverables, such as assessment reports, gap analyses, and configuration checklists, with clear findings, risk ratings, and remediation recommendations.
• Support threat modeling, architecture reviews, and secure code reviews as part of engagements.
• Participate in customer and Professional Services delivery conversations to develop consulting and communication skills.
• Contribute to refining assessment methodologies, automation, and security tooling.

Requirements & Tech Stack

• Foundational understanding of application security concepts and secure development practices.
• Strong written and verbal communication skills, with the ability to explain complex technical concepts clearly and build trusted relationships with customers.
• Strong interest in consulting and hands-on customer delivery.
• Analytical, problem-solving mindset with eagerness to learn.

Qualifications

• 0-2 years of experience, or internship/coursework, in AppSec, Product Security, Security Consulting, or a related field.
• Bachelor's in Information Systems/MIS with a technical lean (e.g., CS coursework or security certifications), or Computer Science with a strong interest in consulting and hands-on customer delivery, or equivalent self-study.

Even Better If You Have

• Knowledge of common vulnerabilities (OWASP Top 10).
• Basic familiarity with web, API, and cloud architectures.
• Proficiency in one or more languages (Java, Python, JavaScript/TypeScript, Go, C#).
• Basic familiarity with IAM concepts.
• Exposure to AI/agentic system security.
• Security tooling or automation projects.
• A cybersecurity internship, or consulting or client-facing experience.