Product Security

Salesforce, Inc.; Ashington; On-site; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Medical Care

Life Insurance

Retirement Savings

Employee Assistance Programs

13 paid holidays and floating holidays

Job summary

Salesforce, Inc. is seeking a Member of Technical Staff on the Product Security team to partner with product and engineering to identify security risks and scale secure practices across the product lifecycle.

You will work on AI-driven and agent-based products, translating threats into mitigations and secure requirements. You will design and implement security controls across distributed systems, including Kubernetes- and Docker-based environments, and support offensive security programs such as

Qualifications

• You have at least 3-5 years of experience in application, product, or security engineering, or a related technical security role.
• Knowledge of evolving security risks affecting ML products, agent-based systems, and AI models and pipelines.
• Hands-on experience exploiting AI/ML and GenAI security risks, including model poisoning, retrieval-augmented generation data leakage, and runtime attack vectors.
• Experience securing multi-cloud platforms and multi-tenant SaaS systems, including Kubernetes- and Docker-based environments.

Responsibilities

• Partner with product and engineering teams to understand goals, identify security risks, and scale security practices across the product lifecycle.
• Conduct secure design reviews and threat modeling to translate threats into mitigations and clear requirements.
• Triage and drive remediation from penetration tests, red team exercises, and bug bounty programs.
• Collaborate on designing and implementing security controls across distributed systems and cloud services.

Skills

Threat modeling

Secure design reviews

Adversarial thinking

Penetration testing

Bug bounty coordination

Tools

Kubernetes

Docker

Cloud platforms

Job description

• Product Security secures the products and platforms that power Salesforce’s customers
• As a Member of Technical Staff on the Product Security team, you partner closely with product and engineering teams to understand product goals and requirements, identify security risks, and help scale security practices across the product lifecycle
• This role offers the opportunity to identify emerging threats in artificial intelligence (AI)-driven and agent-based products and to design security controls and processes that enable rapid, secure product innovation across Salesforce
• Conduct secure design reviews and threat modeling to proactively identify threats and translate them into prioritized mitigations and clear security requirements
• Partner closely with product and engineering teams to design and implement security controls across distributed systems, including microservice architectures, cloud services, and platforms
• Integrate shift-left security practices across the development lifecycle, from early design through production
• Triage and drive remediation of findings from penetration tests, red team exercises, and bug bounty programs

Benefits

• Medical Care
• Life Insurance
• Retirement Savings
• Employee Assistance Programs
• With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year

You have at least 3-5 years of experience in application, product, or security engineering, or a related technical security roleYou have knowledge of evolving security risks affecting machine learning (ML) products, agent-based systems, and AI models and pipelinesYou have a demonstrated adversarial mindset, with the ability to develop threat models and partner with engineering teams to reduce security riskYou have experience securing multi-cloud platforms and multi-tenant software as a service (SaaS) systems, including Kubernetes- and Docker-based environmentsYou have hands-on experience exploiting AI/ML and generative AI (GenAI) security risks, including model poisoning, retrieval-augmented generation (RAG) data leakage, and runtime attack vectorsYou have experience supporting offensive security programs, including bug bounties, red teaming, and penetration testingYou have given external presentations and/or developed open-source security projects or tools