Salesforce

Product Security Lead

Salesforce • $172K — $260K *
San Francisco, CA 94112In-Person
Information Technology
Less than 5 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • 5-7 years of experience in web/application security, especially with modern UI frameworks.
  • Hands-on experience identifying and eliminating web vulnerabilities.
  • Demonstrated expertise in threat modeling for complex web and UI environments.
  • Proficient in JavaScript/TypeScript and familiar with one additional modern programming language (Java, Python, or Go).
  • Established track record of authoring security standards and leading cross-team security initiatives.
  • Experience with AI security challenges, including prompt injection and agentic threat mitigation.

Responsibilities

  • Lead security assurance for UI and experience layers, driving threat modeling and security design reviews.
  • Serve as the security lead on multi-team programs addressing guest-user data access and cross-functional product security.
  • Implement secure design patterns into frameworks and ensure adherence to security standards.
  • Manage AI-related risks by designing mitigation strategies for high-risk features and integrations.
  • Review and enhance security measures for web and data-access APIs, ensuring secure user exposure.

Benefits

  • Comprehensive benefits supporting work-life balance.
  • Opportunities for professional growth and development.
  • Resources for leveraging AI to enhance job performance.
Full Job Description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Product

Job Details

The Experience

Salesforce's Platform Security team protects the foundational platform our customers, partners, and developers build on, balancing deep security expertise with the agility our business depends on. We are hands-on security engineers who collaborate closely with Product and Engineering across the software development lifecycle, trusted for the technical depth we bring to keep the world's #1 CRM platform secure. This role serves as the technical security lead for the user-facing application and experience layers of the platform, including front-end frameworks, runtimes, and rendering surfaces that developers use to author and run experiences. It also covers fast-growing AI agent-driven experiences and web data-access surfaces that render across our own surfaces, third-party channels, and external agentic clients. You'll set the security assurance bar across these areas. You'll shape how controls are designed and drive secure-by-default patterns upstream. You'll serve as a trusted security voice to a top-tier Engineering organization delivering multi-release, cross-team programs, at a time when this layer's trust model is being redefined.

What You'll Actually Be Doing
  • Lead security assurance for the experience and UI layer, driving threat modeling, security design reviews, and targeted code review (JavaScript/TypeScript, Java) across web and UI frameworks, runtimes, rendering pipelines, and the guest-user-exposed data-access APIs beneath them.
  • Serve as the standing security lead for multi-quarter, multi-team programs such as the expansion of guest-user data access, first-party experiences rendering into surfaces we don't control, and the trust model for agent-facing products.
  • Push secure patterns into frameworks, SDKs, and rendering pipelines so unsafe patterns are hard to introduce, and author security standards other teams adopt for web/UI security, guest-user data access, and rendering trust boundaries.
  • Own AI and agentic risk, mitigating threats like prompt injection, excessive agency, and context/memory poisoning; design human-in-the-loop gates for high-risk actions; and define least-privilege scoping, audit logging, and short-lived credentials for agent and connector integrations, including for the Model Context Protocol (MCP).


You're Our Person If...
  • You have deep expertise in web/application security and the security of modern UI frameworks, web runtimes, or data-access APIs, with hands-on experience finding and eliminating web weakness classes and securing guest-user or unauthenticated surfaces.
  • You have threat-modeling experience across complex web, UI, or data-access environments, driven to resolution.
  • You can reason about AI/large language model (LLM) or agentic risk — prompt injection, tool/agent abuse, or MCP/connector security — applied to real product work.
  • You have a track record of authoring security standards and leading cross-team, multi-release security programs, with the ability to influence experienced developers, and can fluently review JavaScript/TypeScript plus at least one other modern language (Java, Python, or Go).


Even Better If...
  • You've secured UI frameworks, web runtimes, GraphQL/data-access APIs, or rendering frameworks at scale, ideally for a large-scale multi-tenant SaaS.
  • You've done hands-on work with LLM application security, agent frameworks, or MCP.
  • You've owned a security program or served as the standing security lead for a product area.
  • You have bug bounty or red-team experience.

Unleash Your Potential

When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance andbe your best, and our AI agents accelerate your impact so you cando your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.

About Salesforce

ExactTarget is a provider of on-demand email marketing software solutions. Their suite of on-demand one-to-one marketing applications enables clients to send business-critical and event-triggered communications to increase sales, optimize marketing investments, and strengthen customer relationships. They offer four editions of their on-demand software application along with integrated solutions such as ExactTarget for AppExchange and ExactTarget for [Microsoft](/organization/Microsoft) Dynamics CRM.

Salesforce Careers

Joining Salesforce means becoming part of a dynamic, global team of professionals who are deeply committed to driving customer success and innovation. As the world's leading Customer Relationship Management (CRM) platform, Salesforce offers unparalleled job opportunities in technology and consulting, making it an ideal place for ambitious individuals looking to make a significant impact.

Work You'll Do

At Salesforce, every position is a chance to leverage your skills and creativity to transform businesses and industries. Our diverse team of experts collaborates to deliver cutting-edge solutions that foster growth and enhance leadership capabilities. By joining our team, you'll be at the forefront of digital innovation, using Salesforce's powerful platform to help clients navigate their transformation journeys.

Innovate and Lead

Salesforce is not just a company; it's a community where you can lead with your ideas and see them come to life. Our culture of innovation encourages you to challenge the status quo and push the boundaries of what's possible. With Salesforce, you'll work alongside leaders in technology and business who are committed to your growth and professional development.

Career Growth and Opportunities

Whether you're looking for an internship, a full-time position, or leadership roles, Salesforce provides a wealth of opportunities to advance your career. Our commitment to professional growth is reflected in our robust training programs, including leadership development and diversity training, designed to help you excel at every stage of your career.

Be Part of a Great Team

Salesforce prides itself on a culture that values diversity, teamwork, and open communication. We believe that our strength lies in our people, and we're committed to creating an environment where everyone can thrive. Joining our team means being part of a supportive community that encourages networking and collaboration.

Benefits and Culture

At Salesforce, we understand that job satisfaction extends beyond the office. That's why we offer competitive benefits to support the health, well-being, and financial security of our employees and their families. From health insurance and retirement plans to wellness programs and flexible working arrangements, we provide the benefits that contribute to a better work-life balance.

Explore Job Opportunities

Ready to take the next step in your career? Explore the wide range of employment opportunities at Salesforce. From technical roles to customer engagement positions, we are continuously hiring talented individuals who are passionate about making a difference.

Stay Connected

Keep up to date with the latest at Salesforce by following our careers blog. Gain insights from the people who work here and learn how you can bring your career to the next level with Salesforce.

Apply Now

Are you ready to join a company that's leading the way in CRM technology? Search open positions that match your skills and interests on our careers page. Tailor your resume, prepare for your interview, and take the first step towards a rewarding career at Salesforce.

SEARCH SALESFORCE JOBS

Join Salesforce today and be part of a company that's shaping the future of technology, fostering a culture of innovation, and building a more equitable world.
Learn more about Salesforce
Size
73,541 employees
Market Cap
$130.4 billion
Industry
Enterprise Technology
Net Income
$4 billion
Founded
2000
5 Year Trend
+25.7%
Revenue
$21.2 billion
NASDAQ
CRM
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Salesforce

More Information Technology Jobs

Find similar Product Security Lead jobs:

NationwideSan Francisco, CA