Product Security Senior
Salesforce1 day ago
Base Salary
$149k - $246k/yr
Responsibilities
- Own security assurance for backend integration areas, event pathways, connectors, APIs, and service-to-service connectivity.
- Drive threat modeling and security design reviews across systems that move customer data across trust boundaries.
- Secure service-to-service authentication, external client applications, agent integrations, and Model Context Protocol connectors.
- Review Java and other source code in large or legacy codebases to identify authentication, integration, and access-control risks.
- Partner with architects, engineers, and product owners to resolve findings and implement secure-by-default patterns.
- Coach junior security engineers on secure design and threat modeling.
Requirements
- Hands-on experience securing backend, integration, or service-connectivity systems.
- Deep expertise in API security, including REST and GraphQL authentication, external exposure, rate limiting, and input validation.
- Ability to threat-model system designs and trace risks to technical, architectural, or organizational root causes.
- Advanced knowledge of authorization, permission and scope models, and service-to-service authentication.
- Working familiarity with OAuth 2.0, OpenID Connect, and JSON Web Tokens.
- Ability to review Java and at least one additional language among JavaScript, TypeScript, Python, or Go, including large or legacy codebases.
- At least 5 years of product, application, or platform security experience operating independently on moderately to highly complex problems.
- Preferred experience securing eventing, messaging, integration, or API platforms at scale; connector or agent security; MCP; multi-tenant SaaS backend security architecture; or embedded product-area security expertise.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Certain roles may be eligible for incentive compensation, equity, and benefits.
Tech Stack
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.