Senior Product Security, Salesforce
Core Platform Security Team
$178.9-246k
+ ESPP
World's leading CRM provider
Open for applications
World's leading CRM provider
1001+ employees
Open for applications
$178.9-246k
+ ESPP
1001+ employees
Company mission
To empower companies to connect with their customers in a whole new way.
Role
Who you are
- You have 5+ years of experience in product, application, or platform security
- You have hands-on experience securing backend, integration, or service-connectivity systems, including API security (REST and GraphQL authentication, rate limiting, and input validation)
- You have working experience with OAuth 2.0, OpenID Connect (OIDC), and JSON Web Tokens (JWT), plus service-to-service authentication and permission models
- You have reviewed source code in Java and at least one other language (JavaScript, TypeScript, Python, or Go) to confirm security risk
Desirable
- You have secured eventing, messaging, integration, or API platforms at scale
- You have connector security, agent integration, or MCP experience, including how trust boundaries work in agentic systems beyond basic prompt injection
- You have multi-tenant software as a service (SaaS) backend security experience at the application layer
- You have served as the embedded security subject-matter expert (SME) for a product area
- You can independently own threat models and explain distributed-systems risks such as race conditions and concurrency flaws
- You write clear security guidance and lead design reviews that keep teams moving
What the job involves
- Salesforce's Platform Security team protects the platform that our customers, partners, and developers build on. We are hands-on security engineers who work closely with Product and Engineering throughout the software development lifecycle
- As a Senior Product Security Engineer, you secure the platform's integration and service-connectivity layer. This includes events, messaging, connectors, Application Programming Interfaces (APIs), and the agent and Model Context Protocol (MCP) connectors that let external tools and AI models talk to the platform
- You help a fast-moving Engineering organization ship safely. You do this through threat modeling, design and code reviews, and secure-by-default guidance. You also get to shape how AI agents connect securely to the world's #1 AI CRM
- Lead threat modeling and security design reviews for the platform's event, messaging, and integration pathways, connectors, and APIs that move customer data between systems. Trace issues to their root cause so fixes land in the right place
- Secure service-to-service authentication, external client apps, and agent and MCP connectors, where excessive privilege, secret leakage, and misuse of delegated access are key threats
- Build secure-by-default patterns into frameworks, connector software development kits (SDKs), and onboarding paths. Review Java, JavaScript, and TypeScript code in a large codebase to validate design assumptions and find risk in authentication, integration, and access-control flows
- Partner with architects, engineers, and product owners to move findings to resolution, and mentor junior security engineers on secure design and threat modeling
Our take
Salesforce is a global cloud computing company, best known for its on-demand, comprehensive customer relationship management (CRM) solutions. The company was launched to mitigate the doubts that business owners felt regarding third party companies holding their data.
By providing essential, customer-oriented CRM software, Salesforce places itself at the heart of digitised businesses. Furthermore, by building out its AI capabilities, the company removes the complexity of AI, enabling any business to deliver smarter, personalised and more predictive customer experiences.
Due to the continued innovation offered by the company, over 150,000 companies, both big and small, are growing their business with Salesforce today. Despite a tumultuous 2023 filled with activist investors, a boardroom shake-up and the unprecedented step-down of Co-CEO Bret Taylor, Salesforce continues to close several acquisition deals and managed to drive up its stock value by 96% from the end of 2022 to 2023.
Steph
Company Specialist at Welcome to the Jungle
Insights
-8% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jun 2001
$46.9m
SERIES D
Nov 1999
$13.2m
SERIES C
Total funding: $64.5m
Company benefits
- With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year
Company HQ
SoMa, San Francisco, CA
Leadership
Marc Benioff
(Chair & CEO)Previously Senior Vice President at Oracle Corporation for 13 years.
Parker Harris
(CTO)Previously worked as a Software Engineer for over six years. Harris also co-founded Left Coast Software.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 455 more jobs at Salesforce