Senior Product Security Lead - UI & AI Risk

salesforce.com, inc.; Bellevue (WA); On-site; USD 173,000 - 260,000; Full time

Job summary

Salesforce is seeking a hands-on Platform Security engineering lead to own the security assurance for the user-facing experience and AI-enabled surfaces across the platform. You’ll collaborate with Product and Engineering across the software development lifecycle to set security standards and drive secure-by-default patterns.

You’ll guide threat modeling, reviews, and code assessments (JavaScript/TypeScript, Java), manage cross-team security programs, and shape risk controls for agent-facing

Qualifications

• Deep expertise in web/application security and modern UI frameworks.
• Threat-modeling experience across complex web, UI, or data-access environments.
• Ability to reason about AI/LLM or agentic risk applied to real product work.
• Track record of authoring security standards and leading cross-team security programs.

Responsibilities

• Lead security assurance for the experience and UI layer, driving threat modeling, security design reviews, and targeted code review (JavaScript/TypeScript, Java) across web and UI frameworks, runtimes, rendering pipelines, and the guest-user-exposed data-access APIs beneath them.
• Serve as the standing security lead for multi-quarter, multi-team programs such as the expansion of guest-user data access, first-party experiences rendering into surfaces we don't control, and the trust model for agent-facing products.
• Push secure patterns into frameworks, SDKs, and rendering pipelines so unsafe patterns are hard to introduce, and author security standards other teams adopt for web/UI security, guest-user data access, and rendering trust boundaries.
• Own AI and agentic risk, mitigating threats like prompt injection, excessive agency, and context/memory poisoning; design human-in-the-loop gates for high-risk actions; and define least-privilege scoping, audit logging, and short-lived credentials for agent and connector integrations, including for the Model Context Protocol (MCP).

Skills

Web security

Threat modeling

Security design reviews

Code review (JavaScript/TypeScript)

Java

Python

Go

Security standards

Security programs management

Tools

JavaScript

TypeScript

Java

Python

Go

Job description

Salesforce is seeking a hands-on Platform Security engineering lead to own the security assurance for the user-facing experience and AI-enabled surfaces across the platform. You’ll collaborate with Product and Engineering across the software development lifecycle to set security standards and drive secure-by-default patterns.

You’ll guide threat modeling, reviews, and code assessments (JavaScript/TypeScript, Java), manage cross-team security programs, and shape risk controls for agent-facing