Product Security Lead: UI & AI Trust Champion

Salesforce, Inc.; Bellevue (WA); Hybrid; USD 173,000 - 260,000; Full time

Job summary

Salesforce, Inc. seeks a Senior Product Security Lead to drive security for the user-facing platform and AI experiences. You will design secure patterns, mentor teams, and define trust models for agent-driven experiences across web UI, runtimes, and data-access APIs.

Based in San Francisco, CA or Seattle/Bellevue, WA, this hybrid role emphasizes threat modeling, secure design reviews, and collaboration with Product and Engineering through the SDLC to raise security standards.

Qualifications

• 8+ years in product, application, or platform security.
• Bachelor's degree in CS, engineering, or related field.
• Deep expertise in web and application security (OWASP, XSS, CSRF, SSRF, broken access control).
• Hands-on experience securing modern UI frameworks, web runtimes, and rendering pipelines.
• Experience securing GraphQL and REST APIs.
• Led threat modeling across complex web/UI/data-access environments.
• Understanding AI/LLM risks in real product work.
• Ability to review JavaScript/TypeScript and at least one other language.

Responsibilities

• Lead security assurance for the UI layer; run threat modeling and code reviews across web frameworks, runtimes, and data-access APIs.
• Serve as the standing security lead for multi-release programs spanning quarters and teams.
• Reduce AI and agentic risk; design least-privilege tool scoping, audit logging, and short-lived scoped credentials.
• Set standards and mentor others; draft security guidelines and coach developers on secure design.

Skills

Security leadership

Threat modeling

Web app security

API security

AI/LLM risk

Code review

JavaScript/TypeScript

Mentoring

Education

Bachelor's degree in Computer Science, Engineering, or related field

Job description

Salesforce, Inc. seeks a Senior Product Security Lead to drive security for the user-facing platform and AI experiences. You will design secure patterns, mentor teams, and define trust models for agent-driven experiences across web UI, runtimes, and data-access APIs.

Based in San Francisco, CA or Seattle/Bellevue, WA, this hybrid role emphasizes threat modeling, secure design reviews, and collaboration with Product and Engineering through the SDLC to raise security standards.