Product Security

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

About Our Team Product Security secures the products and platforms that power Salesforce's customers. As a Member of Technical Staff on the Product Security team, you partner closely with product and engineering teams to understand product goals and requirements, identify security risks, and help scale security practices across the product lifecycle. This role offers the opportunity to identify emerging threats in artificial intelligence (AI)-driven and agent-based products and to design security controls and processes that enable rapid, secure product innovation across Salesforce.

This role is based in Seattle, WA or San Francisco, CA.

Conduct secure design reviews and threat modeling to proactively identify threats and translate them into prioritized mitigations and clear security requirements. Partner closely with product and engineering teams to design and implement security controls across distributed systems, including microservice architectures, cloud services, and platforms. Integrate shift-left security practices across the development lifecycle, from early design through production. Triage and drive remediation of findings from penetration tests, red team exercises, and bug bounty programs.

You have knowledge of evolving security risks affecting machine learning (ML) products, agent-based systems, and AI models and pipelines. You have a demonstrated adversarial mindset, with the ability to develop threat models and partner with engineering teams to reduce security risk. You have experience securing multi-cloud platforms and multi-tenant software as a service (SaaS) systems, including Kubernetes- and Docker-based environments. You have at least 3-5 years of experience in application, product, or security engineering, or a related technical security role.

You have hands-on experience exploiting AI/ML and generative AI (GenAI) security risks, including model poisoning, retrieval-augmented generation (RAG) data leakage, and runtime attack vectors. You have experience supporting offensive security programs, including bug bounties, red teaming, and penetration testing. You have given external presentations and/or developed open-source security projects or tools.

When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love.

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that's inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal.

Any employee or…