Senior Director, Software Engineering

About the role

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Software Engineering

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

The Experience
Senior Director leading Governance for MuleSoft, providing unified leadership across three teams - MS Security Engineering, MS Compliance, and MS SWAT - so that risk, compliance, and operational execution for MuleSoft’s Gov Cloud and On-Prem products are managed cohesively under a single leadership layer. Sets strategy, priorities, and capacity trade-offs for each function’s programs while day-to-day execution stays with each team’s own management chain. Drives org-wide compliance operations and certification coverage across MuleSoft’s global regions, and serves as MSGov ISSO, holding primary accountability to authorizing officials and auditors for the security and compliance posture of the MS Gov Cloud system. Owns cross-team risk identification, treatment, and remediation, and represents MuleSoft’s risk and compliance posture in external-facing commitments with engineering leadership, Salesforce Security, and the sales organization.
What You'll Actually Be Doing

• Provide unified leadership across Security Engineering, Compliance, and Site Reliability Engineering for MS Gov Cloud, so risk signals, patterns, and treatment decisions are connected across teams rather than siloed
• Maintain leadership observation and improvement tracking for direct-report teams (problem areas, hygiene automation, sustainability) while day-to-day team leadership stays with each team’s own lead
• Direct the Security Engineering function’s programs (identity/access, network security, continuous monitoring, product security) - setting priorities and capacity trade-offs at the leadership level while day-to-day execution stays with the team’s own management chain
• Serve as MSGov ISSO - own the security posture of the MS Gov Cloud system, including maintaining the System Security Plan (SSP), authorizing and assessing risk on system changes, ensuring continuous monitoring and vulnerability remediation meet FedRAMP requirements, and acting as the primary point of accountability to authorizing officials and auditors for the system’s ongoing security and compliance.
• Drive org-wide compliance operations for all MuleSoft products across multiple geo regions: AUS, IA, CA, EU, JA, US + US Gov.
• Ensure compliance across 25+ certifications spanning commercial, government, and industry frameworks - including SOC, PCI, HIPAA, ISO, FedRAMP , Protected B, ISMAP , IRAP , CJIS, HiTRUST, C5, and DOD/IL.
• Set direction for MuleSoft’s cloud financial governance strategy - cost visibility, budget planning, and anomaly detection across AWS, Azure, and GCP - partnering with Engineering and Product leadership on annual budget planning and spend accountability.
• Sponsor development of automated compliance tooling to reduce audit fatigue of engineering org: evidence/artifact collection, Key Rotation Monitoring, STIG compliance, etc...
• Review and negotiate formal risk/compliance language for external-facing commitments in partnership with engineering leadership, Salesforce Security, sales, and account executives.
• Ensure vulnerability management of MS Gov Cloud, and On-Prem products; prioritize continuous monitoring operations for MS Gov Cloud and On-Prem Products; drive proactive mitigation of trending vulnerabilities.
• Partner with Salesforce Business Information Security Officer (BISO) to Lead the Risk Management program for MuleSoft engineering org; maintain processes to identify, track, report, and reduce security risk.
• Set the compliance engineering function’s strategy and roadmap for certification maintenance and expansion, ensuring compliance requirements are built into products and services from the outset rather than addressed after the fact.
• Ensure a consistent, centralized approach to control attestation and audit readiness - reducing audit fatigue on engineering teams through proactive preparation, evidence collection, and remediation tracking.
• Direct MS SWAT’s operational execution model for MS Gov Cloud - change case approval/execution, on-duty coverage, and maintenance/release windows - setting standards and priorities while day-to-day execution stays with the team’s own management chain.
• Champion the evolution of cost and infrastructure tooling (Cloud Central Portal, Cost Anomaly Detection) toward a proactive, agentic model that surfaces savings opportunities and infra insights directly to service teams.

Teams Led

• MS Security Engineering - hybrid security + infrastructure engineering team responsible for Identity & Access Management (access approvals, offboarding, credential/key management), Network Security (perimeter defense, certificate management, egress controls), Continuous Monitoring (vulnerability and EOL/patch risk management, scanning and reporting pipelines), and Product Security (secure design reviews, code security validation, penetration testing coordination, bug bounty).
• MS Compliance  drives compliance strategy and roadmapping for new and existing certifications; embeds “compliance-by-design” reviews into the product development lifecycle; centrally validates and approves quarterly control attestations; prepares control owners for audit walkthroughs and drives remediation of audit findings; and builds automation that reduces manual evidence collection and enforces compliance guardrails at scale. Covers certification maintenance and audit support (MSoH, MS Gov Cloud, GIA2H) and FedRAMP significant/non-significant change justifications.
• MS SWAT - production support engineering team serving as the execution/approver for MuleSoft GovCloud change cases; provides on-duty operational coverage and executes bi-weekly maintenance/release windows; executes security remediation change cases; and owns and operates deployment-related infrastructure.
• Oversight Engineering is  focused on financial governance and operational oversight across MuleSoft’s multi-cloud infrastructure (AWS, Azure, GCP). The team owns cloud cost and budget reporting (WoW/MoM/QoQ), drives annual budget planning across Engineering and Product, and runs the Cloud Central Portal and Cost Anomaly Detection Tool to surface savings opportunities and flag anomalous spend — while building toward an agentic layer that proactively delivers this cost and infra data to service teams on request.

Unleash Your Potential

When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.

Accommodations

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.

Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.