Senior Product Security Engineer - Platform & API

Salesforce; Bellevue (WA); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce’s Platform Security team seeks a senior product security engineer for the platform’s integration layer, including events, messaging, connectors, APIs, and service-to-service paths that move customer data. It also covers agent and MCP connectors enabling external tools to talk to the platform.

You will perform threat modeling, secure-by-default guidance, and code reviews (Java, JavaScript/TypeScript, or other as needed), while coaching junior engineers and collaborating with

Qualifications

• Hands-on experience securing backend, integration, or service-connectivity systems.
• Advanced knowledge of authorization and complex permission models and service-to-service authentication.
• Experience with OAuth 2.0, OpenID Connect (OIDC), and JSON Web Tokens (JWT).

Responsibilities

• Own security assurance for critical backend and integration areas across event, integration, connectors, and APIs.
• Lead threat modeling and security design reviews; drive secure-by-default patterns.
• Review code in Java and JavaScript/TypeScript to validate authentication and access-control designs.
• Coach junior security engineers and align findings with architects and product owners.

Skills

API security

Threat modeling

Secure code review

OAuth 2.0

OIDC

JWT

Java

JavaScript/TypeScript

Python

Job description

Salesforce’s Platform Security team seeks a senior product security engineer for the platform’s integration layer, including events, messaging, connectors, APIs, and service-to-service paths that move customer data. It also covers agent and MCP connectors enabling external tools to talk to the platform.

You will perform threat modeling, secure-by-default guidance, and code reviews (Java, JavaScript/TypeScript, or other as needed), while coaching junior engineers and collaborating with