Principal Product Security Engineer
Salesforce2 days ago
Base Salary
$173k - $345k/yr
Responsibilities
- Define and execute end-to-end product security strategy for assigned business units.
- Build scalable and repeatable security review processes and programs from the ground up.
- Conduct architecture reviews and threat models for cloud environments, data platforms, and regulated public-sector deployments.
- Review source code, system integrations, and AI/LLM gateways to identify vulnerabilities and design flaws.
- Advise engineering leadership on security risk and recommend delaying General Availability when critical requirements are unmet.
Requirements
- Require 7–10+ years of hands-on experience in Product Security, Application Security, or Security Architecture.
- Demonstrated experience across Application Security, Cloud Security, and Data Security.
- Track record of building and scaling a security program from the ground up, supported by specific projects led.
- Experience reviewing source code and complex data architectures during security assessments.
- Preferred experience securing AI/LLM infrastructure, including prompt processing, data boundaries, and AI-specific threat mitigation.
- Preferred experience securing large-scale data platforms or system integration pipelines.
- Preferred experience building software for private-cloud, GovCloud, or FedRAMP environments.
- Familiarity with FedRAMP, SOC 2, or NIST CSF security frameworks.
- Must be a U.S. citizen, either U.S. born or naturalized, without dual citizenship, and agree to complete a U.S. federal Minimum Background Investigation for a Moderate Public Trust position.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Eligible roles may receive incentive compensation, equity, and benefits.
- The position is based in the United States, with compensation varying by location.
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.