Product Security Lead - UI/AI Trust & Threat Modeling

100 Salesforce, Inc.; Bellevue (WA); On-site; USD 173,000 - 260,000; Full time

Job summary

Salesforce's Platform Security team protects the foundational platform. This role leads security assurance for the user-facing UI and AI/agent-driven experiences, ensuring secure-by-default patterns across frameworks, runtimes, and data-access surfaces.

You’ll drive threat modeling, design reviews, and code reviews in JavaScript/TypeScript and Java. You’ll influence multi-team efforts, define least-privilege scopes, and own the security posture for guest-user data access and rendering trust

Qualifications

• Deep expertise in web/application security and modern UI frameworks, web runtimes, or data-access APIs.
• Threat-modeling experience across complex web, UI, or data-access environments.
• Ability to fluently review JavaScript/TypeScript plus at least one other modern language (Java, Python, or Go).

Responsibilities

• Lead security assurance for the experience and UI layer, driving threat modeling, security design reviews, and targeted code review (JavaScript/TypeScript, Java) across web and UI frameworks, runtimes, rendering pipelines, and related data-access APIs.
• Own AI and agentic risk; design gates for high-risk actions; define least-privilege scoping, audit logging, and short-lived credentials for integrations.
• Set security standards and patterns adopted by teams; influence developers; drive cross-team, multi-release security programs.

Skills

Web security

Threat modeling

Security design reviews

Code review

Cross-team collaboration

Job description

Salesforce's Platform Security team protects the foundational platform. This role leads security assurance for the user-facing UI and AI/agent-driven experiences, ensuring secure-by-default patterns across frameworks, runtimes, and data-access surfaces.

You’ll drive threat modeling, design reviews, and code reviews in JavaScript/TypeScript and Java. You’ll influence multi-team efforts, define least-privilege scopes, and own the security posture for guest-user data access and rendering trust