Senior Product Security

Salesforce

. Own security assurance for critical backend and integration areas .

Posted 9/23/2026full-timeUnited StatesSenior💰 $148,500 - $223,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing backend and integration systems, with a strong focus on API security, threat modeling, and secure design practices. Proficient in reviewing and analyzing code across multiple languages while mentoring junior engineers in security best practices.

Highest-signal resume keywords

API SecurityThreat ModelingJava Source Code ReviewOAuth 2.0Service-to-Service Authentication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Backend SecurityIntegration SecuritySecure Code ReviewAuthorization ModelsJavaScript/TypeScriptPythonGoJSON Web TokensRoot Cause AnalysisComplex Permission Models

Soft Skills

CoachingCollaborationProblem Solving

Tools & Technologies

OpenID ConnectMCP ConnectorsEventingMessaging

Industry Keywords

Multi-Tenant SaaSProduct SecurityApplication SecurityPlatform Security

Tech Stack

Tools & technologies

GraphQLJavaJavaScriptPythonTypeScriptGo

About the role

Key responsibilities & impact

Own security assurance for critical backend and integration areas
Drive threat modeling and security design reviews across event and integration pathways, connectors, service-to-service connectivity, and APIs carrying data across trust boundaries
Secure service-to-service and connector trust boundaries
Drive secure design and implementation for service-to-service authentication, external client apps, and agent and Model Context Protocol (MCP) connectors
Review Java source code and JavaScript/TypeScript or platform-hosted code in a large codebase
Validate design assumptions and discover risks in authentication, integration, and access-control flows
Trace issues to their true root cause so fixes land at the appropriate layer
Partner with architects, engineers, and product owners to resolve findings
Push secure-by-default patterns into frameworks and onboarding paths
Coach junior security engineers on secure design and threat modeling

Requirements

What you’ll need

Hands-on experience securing backend, integration, or service-connectivity systems
Deep expertise in API security, including REST/GraphQL authentication, external exposure, rate-limiting, input validation, and secure code review
Ability to threat-model system designs and identify concrete security risks and root causes
Advanced knowledge of authorization and complex permission/scope models
Service-to-service authentication experience
Working familiarity with OAuth 2.0, OpenID Connect (OIDC), and JSON Web Tokens (JWT)
Ability to review and analyze Java source code and at least one other language: JavaScript/TypeScript, Python, or Go
Ability to trace large or legacy codebases
5+ years of product, application, or platform security experience
Experience operating independently on problems of moderate-to-high complexity
Eventing, messaging, integration, or API platform security experience at scale preferred
Connector security, agent integration, or MCP experience preferred
Multi-tenant SaaS backend security architecture experience preferred
Experience serving as an embedded security subject-matter expert preferred

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Incentive compensation may be available for certain roles
Equity may be available for certain roles