Product Security Senior - Core Platform Security Team

Leadout Capital; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Salesforce's Platform Security Team seeks a Senior Product Security Engineer to secure the integration and service-connectivity layer, including events, messaging, connectors, APIs, and cross-boundary data flows. You’ll surface risks in ambiguous designs and drive mitigations while guiding threat modeling, design reviews, and secure-by-default guidance.

This senior role requires hands-on experience securing backend and API systems, deep knowledge of OAuth/OIDC/JWT, and the ability to review Java

Qualifications

• Hands-on security engineer with backend/app security experience.
• Experience reviewing authentication, authorization, and data flow.
• Ability to threat-model complex architectures and trace issues to root cause.
• Familiar with secure-by-default patterns and threat modeling in large codebases.

Responsibilities

• Own security assurance for backend and integration paths across platforms.
• Lead threat modeling and security design reviews.
• Review Java and JavaScript/TypeScript code for security defects.
• Partner with architects and engineers to push secure patterns.

Skills

Threat modeling

Security design reviews

API security

Secure code review

Tools

Java

JavaScript/TypeScript

OAuth 2.0

OIDC

JWT

Job description

The Experience

Salesforce's Platform Security Team protects the foundational platform our customers, partners, and developers build on, balancing deep security expertise with the agility our business depends on. We're hands-on security engineers who thrive on close collaboration with Product and Engineering across the software development lifecycle, trusted for the technical depth we bring to keep the world's #1 CRM platform secure.

This role is a Senior Product Security Engineer for the platform's integration and service-connectivity layer, including events, messaging, connectors, APIs, and service-to-service pathways that move customer data across trust boundaries to other internal or external systems. It also covers the fast-growing agent and connector integrations that let external tools and models talk to the platform. You'll surface concrete security risk in ambiguous system designs, drive mitigation for root causes in the layers where they should be fixed, and keep a fast-moving Engineering org shipping safely through threat modeling, design and code reviews, and secure-by-default guidance.

Work Location is San Francisco, CA or Bellevue, WA.

What You'll Actually Be Doing

• Own security assurance for critical backend and integration areas, driving threat modeling and security design reviews across the platform's event and integration pathways, connectors, service-to-service connectivity, and the APIs that carry data across trust boundaries.
• Secure service-to-service and connector trust boundaries, driving secure design and implementation for service-to-service authentication, external client apps, and agent and Model Context Protocol (MCP) connectors, where excessive privilege, confused-deputy risk, and secret leakage are first-class threats.
• Review source code in depth (Java, plus JavaScript/TypeScript or platform-hosted code as needed) in a large codebase to validate design assumptions and discover risk in authentication, integration, and access-control flows, tracing issues back to their true root cause so fixes land at the right layer.
• Partner with architects, engineers, and product owners to move findings to resolution, push secure-by-default patterns into frameworks and onboarding paths, and coach junior security engineers on secure design and threat modeling.

You're Our Person If...

• You have hands-on experience securing backend, integration, or service-connectivity systems, with deep expertise in API security (REST/GraphQL authentication, external exposure, rate-limiting, input validation) and secure code review.
• You can threat-model a system's design to surface concrete security risk rather than enumerate a checklist, tracing issues to their technical, architectural, or organizational root cause.
• You have advanced knowledge of authorization and complex permission/scope models and service-to-service authentication, plus working familiarity with delegated-authorization flows such as OAuth 2.0, OpenID Connect (OIDC), and JSON Web Tokens (JWT).
• You can review and analyze Java source code and at least one other language (JavaScript/TypeScript, Python, or Go), including tracing large or legacy codebases, and you have 5+ years in product, application, or platform security operating independently on problems of moderate-to-high complexity.

Even Better If...

• You’ve secured eventing, messaging, integration, or API platforms at scale.
• You have hands-on connector security, agent integration, or MCP experience, including reasoning about trust boundaries for agentic systems beyond basic prompt injection.
• You have multi-tenant SaaS backend security architecture experience at the application layer.
• You've served as the embedded security subject-matter expert for a product area.