Platform UI Security Lead AI & Guest Data Safety

Leadout Capital; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Salesforce is seeking a technical security lead for the user-facing experience and UI layers of the platform. You will drive threat modeling, security design reviews, and targeted code reviews across web frameworks, runtimes, and rendering surfaces, including AI/agent-driven experiences.

You will own risk management for guest-user data access, implement least-privilege controls, and shape secure-by-default patterns across multi‑team programs, working with senior engineering teams.

Qualifications

• Must have deep expertise in web/application security and securing guest-user surfaces.
• Threat-modeling experience across complex web/UI/data-access environments.
• Ability to review JavaScript/TypeScript plus at least one other modern language (Java, Python, or Go).
• Experience authoring security standards and leading cross-team, multi-release security programs.

Responsibilities

• Lead security assurance for the experience and UI layer, driving threat modeling and security design reviews across web frameworks and rendering pipelines.
• Serve as the standing security lead for multi-quarter, multi-team programs involving guest-user data access and trust models for agent-facing products.
• Push secure patterns into frameworks, SDKs, and rendering pipelines and define least-privilege scoping and audit logging.
• Own AI and agentic risk mitigation, including prompt injection and MCP/Model Context Protocol considerations.

Skills

Web security

Threat modeling

Security design reviews

Code review

JavaScript

TypeScript

Java

AI/LLM security

Tools

JavaScript

TypeScript

Java

Job description

Salesforce is seeking a technical security lead for the user-facing experience and UI layers of the platform. You will drive threat modeling, security design reviews, and targeted code reviews across web frameworks, runtimes, and rendering surfaces, including AI/agent-driven experiences.

You will own risk management for guest-user data access, implement least-privilege controls, and shape secure-by-default patterns across multi‑team programs, working with senior engineering teams.