Product Security Senior - Core Platform Security Team
Salesforce16 days ago
Base Salary
$149k - $246k/yr
Responsibilities
- Lead threat modeling and security design reviews for event, messaging, integration, connector, and API pathways.
- Secure service-to-service authentication, external client applications, agent connectors, and MCP connectors.
- Build secure-by-default patterns into frameworks, connector SDKs, and onboarding paths.
- Review Java, JavaScript, and TypeScript code for authentication, integration, and access-control risks.
- Partner with architects, engineers, and product owners to resolve security findings.
- Mentor junior security engineers on secure design and threat modeling.
Requirements
- 5+ years of experience in product, application, or platform security.
- Hands-on experience securing backend, integration, or service-connectivity systems.
- Experience with REST and GraphQL API security, including authentication, rate limiting, and input validation.
- Working knowledge of OAuth 2.0, OpenID Connect, JSON Web Tokens, service-to-service authentication, and permission models.
- Source-code review experience in Java and at least one of JavaScript, TypeScript, Python, or Go.
- Preferred experience securing eventing, messaging, integration, or API platforms at scale.
- Preferred connector security, agent integration, or MCP experience, including agentic-system trust boundaries.
- Preferred multi-tenant SaaS backend security experience and experience serving as an embedded security subject-matter expert.
- Ability to independently own threat models, explain distributed-systems risks such as race conditions and concurrency flaws, and lead security design reviews.
Benefits
- Hybrid work arrangement based in San Francisco, CA, or Seattle/Bellevue, WA.
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Certain roles may be eligible for incentive compensation, equity, and benefits.
Tech Stack
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.