jobapplier

Product Security

Salesforce

Skills

Required

  • machine learning
  • ML
  • agent-based systems
  • AI models and pipelines
  • develop threat models
  • multi-cloud
  • multi-tenant software as a service
  • Kubernetes

Preferred

  • open-source security projects
  • design reviews
  • platforms
  • threat modeling
  • proactively identify threats
  • microservice architectures
  • cloud services
  • red team

Join Salesforce's Product Security team as a Member of Technical Staff. In this role, you will partner closely with product and engineering teams to identify security risks and scale security practices across the product lifecycle. You will have the opportunity to design security controls and processes for AI-driven and agent-based products, conduct secure design reviews, and drive remediation of security findings. This position offers a comprehensive benefits package, including medical care, life insurance, retirement savings, and paid time off.

Responsibilities

  • Conduct secure design reviews and threat modeling to proactively identify threats and translate them into prioritized mitigations and clear security requirements.
  • Partner closely with product and engineering teams to design and implement security controls across distributed systems, including microservice architectures, cloud services, and platforms.
  • Triage and drive remediation of findings from penetration tests, red team exercises, and bug bounty programs.

Requirements

  • You have at least 3-5 years of experience in application, product, or security engineering, or a related technical security role
  • You have knowledge of evolving security risks affecting machine learning (ML) products, agent-based systems, and AI models and pipelines
  • You have a demonstrated adversarial mindset, with the ability to develop threat models and partner with engineering teams to reduce security risk
  • You have experience securing multi-cloud platforms and multi-tenant software as a service (SaaS) systems, including Kubernetes- and Docker-based environments
  • You have hands-on experience exploiting AI/ML and generative AI (GenAI) security risks, including model poisoning, retrieval-augmented generation (RAG) data leakage, and runtime attack vectors
  • You have experience supporting offensive security programs, including bug bounties, red teaming, and penetration testing

Preferred

  • You have given external presentations and/or developed open-source security projects or tools

Pay

USD 117,200 - 194,200