Mobile Security Engineer — AI‑First Security

Salesforce; Seattle (WA); On-site; USD 117,200 - 176,700; Full time

Job summary

Salesforce is seeking a Mobile Security Engineer to own the security posture of our mobile app portfolio across iOS and Android, including testing, scanning, and security design reviews.

You will safeguard apps used by millions, collaborating with engineering teams to ensure strong runtime protections, secure auth flows, and maintain high security standards across all mobile features.

Qualifications

• 2+ years in application/mobile security with OWASP Mobile Top 10 knowledge.
• Hands-on with mobile toolchain (Xcode/Android Studio).
• Experience with mobile security testing tools (Frida, NowSecure, MobSF, Burp Suite).
• Understanding of OAuth 2.0, PKCE, SAML and runtime protection mechanisms.
• Strong communication to explain mobile-specific risks to engineering partners.
• AI-first approach using AI tools in development workflows.
• Related technical degree required.

Responsibilities

• Perform manual and automated security assessments of iOS and Android apps.
• Manage mobile scanning platform and CI/CD integration.
• Conduct secure code reviews across Kotlin, Swift, and React Native.
• Provide mobile security guidance to engineering teams across Clouds.
• Design and ship production-grade security tooling and AI-enhanced workflows.
• Lead threat modeling for mobile attack surfaces including on-device AI.
• Evaluate system designs for security and reliability.

Skills

Mobile Security

iOS Security

Android Security

OWASP Mobile Top 10

Xcode/Android Studio

AI Tools in Development

Education

Technical degree

Tools

Frida

NowSecure

MobSF

Burp Suite

Objection

Job description

Salesforce is seeking a Mobile Security Engineer to own the security posture of our mobile app portfolio across iOS and Android, including testing, scanning, and security design reviews.

You will safeguard apps used by millions, collaborating with engineering teams to ensure strong runtime protections, secure auth flows, and maintain high security standards across all mobile features.