Staff Product Security — AI/ML Threat Modeling

Salesforce; San Francisco (CA); On-site; USD 117,000 - 177,000; Full time

Benefits offered by this job

time off programs

medical

dental

vision

mental health support

paid parental leave

life and disability insurance

401(k)

employee stock purchasing program

Job summary

Salesforce is seeking a Member of Technical Staff, Product Security to help secure AI-driven products. You will partner with product and engineering teams to design and implement security controls across distributed systems, integrating shift-left practices and driving remediation of penetration tests and bug bounties.

This role focuses on ML/AI security risks and multi-cloud, multi-tenant SaaS environments.

Qualifications

• Knowledge of evolving security risks affecting ML products and AI models.
• Experience securing multi-cloud platforms and multi-tenant SaaS, including Kubernetes and Docker.
• 3–5 years in application, product, or security engineering, or a related technical security role.

Responsibilities

• Conduct secure design reviews and threat modeling to proactively identify threats and translate them into prioritized mitigations and clear security requirements.
• Partner closely with product and engineering teams to design and implement security controls across distributed systems, including microservice architectures, cloud services, and platforms.
• Integrate shift-left security practices across the development lifecycle, from early design through production.
• Triage and drive remediation of findings from penetration tests, red team exercises, and bug bounty programs.

Skills

Threat modeling

Security engineering

Adversarial mindset

ML security

Multi-cloud

Kubernetes

Docker

3-5 years experience

Tools

Kubernetes

Docker

Job description

Salesforce is seeking a Member of Technical Staff, Product Security to help secure AI-driven products. You will partner with product and engineering teams to design and implement security controls across distributed systems, integrating shift-left practices and driving remediation of penetration tests and bug bounties.

This role focuses on ML/AI security risks and multi-cloud, multi-tenant SaaS environments.