Senior Product Security (Core Platform Security Team) in Ashington

Senior Product Security (Core Platform Security Team) in Ashington

Ashington Full-Time 66150 - 80850 £ / year (est.) On-site
Salesforce, Inc.

At a Glance

  • Tasks: Secure Salesforce's platform by leading threat modeling and design reviews for integrations and APIs.
  • Company: Join the innovative Platform Security team at Salesforce, a leader in AI CRM.
  • Benefits: Enjoy medical care, life insurance, retirement savings, and 13 paid days off annually.
  • Other info: Mentor junior engineers and collaborate with top architects and engineers in a dynamic environment.
  • Why this job: Make a real impact on security while shaping how AI connects to the world's #1 CRM.
  • Qualifications: 5+ years in product security with experience in Java and other programming languages.

The predicted salary is between 66150 - 80850 £ per year.

  • Salesforce’s Platform Security team protects the platform that our customers, partners, and developers build on.

We are hands-on security engineers who work closely with Product and Engineering throughout the software development lifecycle

  • As a Senior Product Security Engineer, you secure the platform’s integration and service-connectivity layer.

This includes events, messaging, connectors, Application Programming Interfaces (APIs), and the agent and Model Context Protocol (MCP) connectors that let external tools and AI models talk to the platform

  • You help a fast-moving Engineering organization ship safely.

You do this through threat modeling, design and code reviews, and secure-by-default guidance.

  • You also get to shape how AI agents connect securely to the world’s #1 AI CRM
  • Lead threat modeling and security design reviews for the platform’s event, messaging, and integration pathways, connectors, and APIs that move customer data between systems.
  • Trace issues to their root cause so fixes land in the right place
  • Secure service-to-service authentication, external client apps, and agent and MCP connectors, where excessive privilege, secret leakage, and misuse of delegated access are key threats
  • Build secure-by-default patterns into frameworks, connector software development kits (SDKs), and onboarding paths.

Review Java, Java Script, and Type Script code in a large codebase to validate design assumptions and find risk in authentication, integration, and access-control flows

  • Partner with architects, engineers, and product owners to move findings to resolution, and mentor junior security engineers on secure design and threat modeling

Benefits

  • Medical Care
  • Life Insurance
  • Retirement Savings
  • Employee Assistance Programs
  • With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year
  • You have 5+ years of experience in product, application, or platform security
  • You have reviewed source code in Java and at least one other language (Java Script, Type Script, Python, or Go) to confirm security risk
  • You have working experience with OAuth 2.0, Open ID Connect (OIDC), and JSON Web Tokens (JWT), plus service-to-service authentication and permission models
  • You have hands-on experience securing backend, integration, or service-connectivity systems, including API security (REST and Graph QL authentication, rate limiting, and input validation)
  • You have secured eventing, messaging, integration, or API platforms at scale
  • You have connector security, agent integration, or MCP experience, including how trust boundaries work in agentic systems beyond basic prompt injection
  • You have multi-tenant software as a service (Saa S) backend security experience at the application layer
  • You can independently own threat models and explain distributed-systems risks such as race conditions and concurrency flaws
  • You have served as the embedded security subject-matter expert (SME) for a product area
  • You write clear security guidance and lead design reviews that keep teams moving

Senior Product Security (Core Platform Security Team) in Ashington employer: Salesforce, Inc.

Salesforce is an exceptional employer that champions innovation and inclusivity, making it a prime choice for those looking to thrive in the dynamic field of customer success. With a strong focus on employee growth, comprehensive benefits, and a vibrant work culture in London, Salesforce empowers its team members to drive meaningful change while enjoying a balanced work-life experience. Join us to be part of a forward-thinking company where your contributions truly matter and where you can unleash your potential as a Trailblazer.

Salesforce, Inc.

Contact Details:

Salesforce, Inc. Recruitment Team

StudySmarter Expert Advice🤫

We think this is how you could land Senior Product Security (Core Platform Security Team) in Ashington

✨Join Local Tech Meetups

Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at Salesforce, Inc. or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!

✨Contribute to Open Source Projects

Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to Salesforce, Inc..

✨Tap into Online Developer Communities

Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like Salesforce, Inc..

✨Explore Job Boards Specifically for Tech Roles

Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like Salesforce, Inc. that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!

We think you need these skills to ace Senior Product Security (Core Platform Security Team) in Ashington

Threat Modeling
Security Design Reviews
Secure-by-Default Guidance
Java
JavaScript
TypeScript
OAuth 2.0

Some tips for your application 🫡

Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.

Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at Salesforce, Inc..

Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at Salesforce, Inc. and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!

Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!

How to prepare for a job interview at Salesforce, Inc.

✨Brush Up on Your Coding Skills

For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.

✨Know Your Tools and Frameworks

Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If Salesforce, Inc. uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.

✨Showcase Your Projects

Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.

✨Prepare for Behavioural Questions

While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.