Product Security Lead

Salesforce
Bellevue, San Francisco
Workplace: OnsiteFull timeUSD 172,500 - 260,100 annuallyFunction: Administration & Executive AssistanceSkills: ["Threat modeling","Security design reviews","Secure-by-default thinking","Cross-team influence","Code review"]

Serve as the technical security lead for Salesforce’s user-facing platform experience layers, partnering with Product and Engineering to set security assurance across web/UI frameworks, runtimes, rendering pipelines, and guest-user data-access APIs. Lead threat modeling, security design reviews, and targeted code reviews (JavaScript/TypeScript and Java). Own AI/agentic risk by defining least-privilege, audit logging, and secure-by-default patterns for agent and connector integrations.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Salesforce
Salesforce
1 day ago

Product Security Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 15 hours agoStatus: Live

Job Summary

Serve as the technical security lead for Salesforce’s user-facing platform experience layers, partnering with Product and Engineering to set security assurance across web/UI frameworks, runtimes, rendering pipelines, and guest-user data-access APIs. Lead threat modeling, security design reviews, and targeted code reviews (JavaScript/TypeScript and Java). Own AI/agentic risk by defining least-privilege, audit logging, and secure-by-default patterns for agent and connector integrations.
Location: Bellevue, San Francisco
Workplace: Onsite
Employment Type: Full time
Job Function: Administration & Executive Assistance

Key Responsibilities

  • •Lead security assurance for the experience and UI layer, driving threat modeling, security design reviews, and targeted code review across web/UI frameworks, runtimes, rendering pipelines, and guest-user-exposed data-access APIs.
  • •Serve as standing security lead for multi-quarter, multi-team programs including expansion of guest-user data access, first-party experiences rendering into uncontrolled surfaces, and agent-facing trust model.
  • •Push secure patterns into frameworks, SDKs, and rendering pipelines so unsafe patterns are hard to introduce, and help define standards for web/UI security, guest-user data access, and rendering trust boundaries.
  • •Own AI and agentic risk by mitigating prompt injection, excessive agency, and context/memory poisoning; design human-in-the-loop gates for high-risk actions.
  • •Define least-privilege scoping, audit logging, and short-lived credentials for agent and connector integrations, including MCP.

Pay and Benefits

Salary: USD 172,500 - 260,100 annually
Perks:Health InsuranceDentalVisionPaid ParentalLife InsuranceDisability Insurance401kEquity

Key Requirements

  • •Deep expertise in web/application security and securing modern UI frameworks, web runtimes, or data-access APIs, including eliminating web weakness classes on guest/unauthenticated surfaces.
  • •Threat-modeling experience across complex web, UI, or data-access environments, driven to resolution.
  • •Experience reasoning about AI/LLM or agentic risk (prompt injection, tool/agent abuse, MCP/connector security) applied to real product work.
  • •A track record of authoring security standards and leading cross-team, multi-release security programs, with strong influence and the ability to review JavaScript/TypeScript plus at least one other modern language (Java, Python, or Go).
  • •Track record securing UI frameworks/web runtimes/GraphQL/data-access APIs/rendering frameworks at scale, ideally for large-scale multi-tenant SaaS (preferred).
Experience:SaaSMulti-tenant
Skills:Threat modelingSecurity design reviewsSecure-by-default thinkingCross-team influenceCode review
Tech Stack:JavaScriptTypeScriptJavaPythonGoGraphQLLLMMCPWeb UIAIAgent frameworks

Company Brief

Salesforce
Provides a leading cloud-based customer relationship management (CRM) platform with sales, service, marketing, analytics, and integration tools that empower businesses to manage customer relationships and digital transformation at scale.
Industry: SaaS
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 1999
Glassdoor
Glassdoor: 4.1
WebsiteLinkedInGlassdoor