Associate Security Consultant

About the Role

The Associate Security Consultant - PSSA, Early Talent role is part of the Professional Services Security Assurance (PSSA) team within Salesforce's Security Practice. This team provides customers with hands-on assistance in securing their Salesforce implementations. The mission is to help Professional Services deliver secure implementations and protect customer data at scale.

Role Overview

You will support customer-facing security engagements, learning to run standardized assessments and convert technical risks into clear, actionable guidance, with mentorship from senior consultants.

Key Responsibilities

• Help execute standardized security assessment methodologies for customer implementations, covering web, API, cloud, and AI-enabled applications.
• Assist with post-sale and deployment security configuration reviews, including identity and access management (IAM) posture and integration risks.
• Help produce customer-facing deliverables, such as assessment reports, gap analyses, and configuration checklists, with clear findings, risk ratings, and remediation recommendations.
• Support threat modeling, architecture reviews, and secure code reviews as part of engagements.
• Join customer and Professional Services delivery conversations to build consulting and communication skills.
• Help refine assessment methodologies, automation, and security tooling.

Requirements & Tech Stack

• 0-2 years of experience, or internship/coursework, in AppSec, Product Security, Security Consulting, or a related field.
• Foundational understanding of application security concepts and secure development practices.
• Strong written and verbal communication skills, with the ability to explain complex technical concepts clearly and build trusted relationships with customers.
• Strong interest in consulting and hands-on customer delivery.
• Analytical, problem-solving mindset with eagerness to learn.
• Bachelor's in Information Systems/MIS with a technical lean (e.g., CS coursework or security certifications), or Computer Science with a strong interest in consulting and hands-on customer delivery, or equivalent self-study.

Even Better If You Have

• Knowledge of common vulnerabilities (OWASP Top 10).
• Basic familiarity with web, API, and cloud architectures.
• Proficiency in one or more languages (Java, Python, JavaScript/TypeScript, Go, C#).
• Basic familiarity with IAM concepts.
• Exposure to AI/agentic system security.
• Security tooling or automation projects.
• A cybersecurity internship, or consulting or client-facing experience.