Product Security Engineer Intern, Salesforce

• Strong background in Computer Science, Electrical Engineering, Cyber Security or related discipline
• Must be located in North America
• Basic knowledge of security concepts based on relevant courses, self-learning or past internships
• Familiarity with identifying and protecting against web application and web service security vulnerabilities including those found in the OWASP Top 10 and CWE Top 25
• Relevant development experience in several of these languages: Java, JavaScript / NodeJS, Ruby, .NET, C / Objective C, PHP, Python
• Familiarity with the browser security model, crypto, and network security
• Solid understanding of Application and Networking fundamentals
• Attacker mentality: Passion for breaking all the things unbreakable

Desirable

• Your days at Salesforce will be spent collaborating with and contributing to your team
• You will be assigned real projects and make an impact, all while receiving mentorship from amazing engineers on your teams
• In essence, your internship will be an opportunity to join us in making work simpler, more pleasant, and more productive for millions of people around the world
• In addition, you will have access to resources and events to help you grow both professionally and personally
• You will go through global onboarding, engineering-specific training, and intern-specific onboarding to ensure you are set up for success
• Throughout your internship, you will be part of events including Executive Speaker Series, Volunteer Time Off, Workshops, and Socials
• You will also have recruiter check-ins, general guidance and support to make the most of your internship experience
• Lastly, you have access to participate in any of our Employee Resource Groups (ERGs)
• As a Futureforce intern, you will not only contribute to the meaningful work our teams do, but you will also have the opportunity to interact with senior executives and network with a number of employees across the company
• In addition to these impactful opportunities, ensuring you participate in a number of events outside of your day-to-day duties is top of mind for us
• Our Product Security team ensures the security of our products and serves as domain experts for our R&D teams and AppExchange partners to protect our customers’ data in today’s constantly evolving threat landscape
• We are a team of curious minds that specialize in security research, penetration testing, and innovative tool development
• We evaluate a broad range of technologies including complex web applications, distributed processing, virtualized environments and isolation of untrusted code
• With the full backing of our executive leadership, you'll work closely with the technology organization and partners to evaluate the design and implementation of our product offerings, help create innovative security solutions for our products, and educate our teams on secure application development and emerging threats
• In addition, you will create new tools, conduct industry-leading research, and solve ambitious technical problems on the forefront of application security
• Perform black-box penetration testing and code reviews of our flagship services, product offerings and partners apps
• Implement the technology organization's security and privacy initiatives by participating in design reviews and threat modeling
• Participate in our incident response and vulnerability remediation efforts
• Perform ground breaking applied research on new attacks and present new findings to both internal and external audiences
• Evaluate application security tools for internal consumption. Develop new automation and tooling to improve our detection and prevention capabilities
• Develop secure code practices and provide hands-on training to developers and quality engineers

• End Date: October 24, 2025