Principal Engineer, Product Security & AI Risk

Salesforce; San Francisco (CA); On-site; USD 173,000 - 345,000; Full time

Job summary

Salesforce is seeking a Principal Engineer, Product Security to serve as the security authority across multiple high-growth cloud units, shaping end-to-end security strategy and embedding safeguards into design.

You will review architecture, model threats, read code, and advise engineering leadership on risk and GA readiness, with hands-on work spanning SaaS, data platforms, and regulated deployments.

Qualifications

• 7-10+ years of hands-on experience in a Product Security, Application Security, or Security Architecture role.
• Demonstrated experience across Application Security, Cloud Security, and Data Security, including how these domains interact in practice.
• A track record of building and scaling a security program from the ground up, documented through specific projects you led.
• Experience reviewing source code and complex data architectures as part of a security assessment.

Responsibilities

• Define and execute the end-to-end product security strategy for assigned business units, building scalable, repeatable review processes where none currently exist.
• Conduct architecture reviews and threat models for complex cloud environments, data platforms, and regulated public-sector deployments.
• Review code, system integrations, and AI/LLM gateways directly to identify vulnerabilities and design flaws.
• Advise engineering leadership on security risk, including recommending a delay to General Availability (GA) when critical requirements are unmet.

Skills

Product Security

Application Security

Security Architecture

Security program leadership

Code reviews

Job description

Salesforce is seeking a Principal Engineer, Product Security to serve as the security authority across multiple high-growth cloud units, shaping end-to-end security strategy and embedding safeguards into design.

You will review architecture, model threats, read code, and advise engineering leadership on risk and GA readiness, with hands-on work spanning SaaS, data platforms, and regulated deployments.