Description
Salesforce is seeking a Senior Product Security Engineer to join their Platform Security Team. The successful candidate will be responsible for protecting the foundational platform that customers, partners, and developers build on, balancing deep security expertise with the agility the business depends on.
The role involves owning security assurance for critical backend and integration areas, driving threat modeling and security design reviews across the platform's event and integration pathways, connectors, service-to-service connectivity, and APIs. The ideal candidate will have hands-on experience securing backend, integration, or service-connectivity systems, with deep expertise in API security and secure code review.
Key responsibilities include:
- Own security assurance for critical backend and integration areas
- Drive threat modeling and security design reviews across the platform's event and integration pathways
- Secure service-to-service and connector trust boundaries
- Review source code in depth to validate design assumptions and discover risk
- Partner with architects, engineers, and product owners to move findings to resolution
Requirements:
- Hands-on experience securing backend, integration, or service-connectivity systems
- Deep expertise in API security and secure code review
- Advanced knowledge of authorization and complex permission/scope models
- Working familiarity with delegated-authorization flows such as OAuth 2.0, OpenID Connect, and JSON Web Tokens
- 5+ years in product, application, or platform security operating independently on problems of moderate-to-high complexity
Benefits:
- Time off programs
- Medical, dental, vision
- Mental health support
- Paid parental leave
- Life and disability insurance
- 401(k)
- Employee stock purchasing program
The typical base salary range for this position is $148,500 - $223,900 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $178,900 - $246,000 annually.