Product Security Engineer, Senior & Lead (Enterprise Security - Security AI)

Senior and Lead Security Engineer – Secure AI Team This role focuses on assessing and maintaining the security of AI tooling within Salesforce. You will work with business stakeholders and technology partners to ensure AI solutions meet or exceed Salesforce security requirements when deployed at scale. Responsibilities Perform in-depth security assessments of emerging technology (AI tooling, agentic platforms) including architecture and design reviews, code reviews, and penetration tests. Provide guidance to team members and suppliers on Salesforce security requirements, remediation advice, and potential feature enhancements. Threat‑model common attacker methods to develop mitigation techniques that balance security and functional requirements. Develop automated processes and support the improvement of tooling to identify and resolve problems at scale. Collaborate with engineering teams and business partners to drive solutions through a secure development lifecycle. Define and develop technical security standards and guidelines with business partners. Research new technologies, emerging threats, and vulnerabilities for strategic planning and process improvements. Communicate findings, recommendations, and security concepts clearly to stakeholders at all levels. Qualifications 5+ years of experience in a senior security role (8+ years for lead). Experience with large language models (LLMs) and agentic systems – building, evaluating, or securing them. Familiarity with AI security attack surfaces including prompt injection, data exfiltration, privilege escalation in agents, and model supply‑chain risks. Excellent interpersonal, collaboration, critical‑thinking, and communication skills. Related technical degree required. Preferred Qualifications Understanding of RAG architectures, classifier models, and retrieval/generation pipelines. Familiarity with security frameworks and certifications such as ISO27001, SOC2, PCIDSS, OWASPTop10, CWETop25, and MITREATT&CK. Relevant BA/BS degree and/or certifications such as CRISC, CISSP, CCIE, CISM, CISA, or CCSK. Experience defining and communicating security remediation tasks to project and data owners. Accommodations Reasonable accommodations are available during the application or recruiting process. Submit a request via the Accommodations Request Form. Equal Opportunity Employer Salesforce is an equal opportunity employer and maintains a policy of non‑discrimination with all employees and applicants for employment. We are committed to a workplace that is inclusive and free from discrimination. All hiring decisions are based on merit, competence, and qualifications, without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other protected classifications. #J-18808-Ljbffr