Description
Salesforce is seeking a Technical Security Lead to join its Platform Security team. The successful candidate will serve as the technical security lead for the user-facing application and experience layers of the platform, including front-end frameworks, runtimes, and rendering surfaces.
The ideal candidate will have deep expertise in web/application security and the security of modern UI frameworks, web runtimes, or data-access APIs, with hands-on experience finding and eliminating web weakness classes and securing guest-user or unauthenticated surfaces.
Key responsibilities include:
- Leading security assurance for the experience and UI layer, driving threat modeling, security design reviews, and targeted code review across web and UI frameworks, runtimes, rendering pipelines, and the guest-user-exposed data-access APIs beneath them.
- Serving as the standing security lead for multi-quarter, multi-team programs such as the expansion of guest-user data access, first-party experiences rendering into surfaces we don't control, and the trust model for agent-facing products.
- Pushing secure patterns into frameworks, SDKs, and rendering pipelines so unsafe patterns are hard to introduce, and authoring security standards other teams adopt for web/UI security, guest-user data access, and rendering trust boundaries.
- Owning AI and agentic risk, mitigating threats like prompt injection, excessive agency, and context/memory poisoning; designing human-in-the-loop gates for high-risk actions; and defining least-privilege scoping, audit logging, and short-lived credentials for agent and connector integrations.
The typical base salary range for this position is $172,500 - $260,100 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $207,800 - $285,800 annually.