Product Security Lead
Salesforce1 day ago
Base Salary
$173k - $286k/yr
Responsibilities
- Lead security assurance for web and UI layers through threat modeling, security design reviews, and targeted code reviews.
- Serve as the standing security lead for complex, multi-quarter, multi-team product security programs.
- Drive secure-by-default patterns in frameworks, SDKs, and rendering pipelines and author standards for web/UI security and data-access security.
- Own AI and agentic risk mitigations, including defenses against prompt injection, excessive agency, and context or memory poisoning.
- Define human-in-the-loop controls, least-privilege scoping, audit logging, and short-lived credentials for agent and connector integrations, including MCP.
Requirements
- Deep expertise in web/application security and modern UI frameworks, web runtimes, or data-access APIs.
- Hands-on experience identifying and eliminating web weakness classes and securing guest-user or unauthenticated surfaces.
- Experience driving threat models across complex web, UI, or data-access environments to resolution.
- Ability to assess AI, LLM, or agentic risks such as prompt injection, tool abuse, and MCP or connector security in real product work.
- Track record of authoring security standards and leading cross-team, multi-release security programs.
- Fluency reviewing JavaScript/TypeScript and at least one of Java, Python, or Go.
- Preferred experience securing UI frameworks, web runtimes, GraphQL/data-access APIs, or rendering frameworks at scale.
- Preferred experience with LLM application security, agent frameworks, MCP, bug bounty programs, or red-team work.
Benefits
- Salesforce offers time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Reasonable accommodations are available during the application and recruiting process.
Tech Stack
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.