Product Security Associate
Salesforce1 day ago
Base Salary
$108k - $159k/yr
Responsibilities
- Secure AI-driven products by identifying novel risks and implementing safeguards.
- Conduct secure design reviews and threat modeling, then translate findings into prioritized mitigations and security requirements.
- Partner with product and engineering teams to implement security controls across distributed systems, microservice architectures, cloud services, and platforms.
- Integrate shift-left security practices from early design through production.
- Triage and drive remediation of findings from penetration tests, red-team exercises, and bug-bounty programs.
- Address evolving security needs across AI/ML features, agent-based systems, AI models, and pipelines.
Requirements
- Knowledge of security risks affecting AI/ML products, agent-based systems, AI models, and pipelines.
- An adversarial mindset and ability to develop threat models and partner with engineering teams to reduce risk.
- Experience securing multi-cloud platforms and multi-tenant SaaS systems, including Kubernetes- and Docker-based environments.
- Practical experience with manual and tool-assisted secure code reviews in Java, JavaScript, Python, or similar languages.
- Hands-on experience with Burp Suite, Nessus, Metasploit, and Nmap.
- At least 3–5 years of experience in application, product, security engineering, or a related technical security role.
- Strong communication skills for conveying security risks to technical and non-technical stakeholders.
- Preferred: experience exploiting AI/ML and GenAI risks, including model poisoning, RAG data leakage, and runtime attack vectors.
- Preferred: experience supporting bug-bounty, red-team, and penetration-testing programs.
- Preferred: external presentation experience or development of open-source security projects or tools.
Benefits
- Benefits include time-off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Salesforce provides mentorship, job shadowing, talent development courses, and networking opportunities through its university recruiting program.
Tech Stack
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.