Mobile Security Engineer - Product Security
Core
Own the security posture of Salesforce's mobile application portfolio, ensuring validated security controls, runtime protection, and authentication flows for millions of daily users.
Role type
Senior IC mobile security engineer (product security)
Builds
Production-grade security tooling, automation, and secure mobile SDKs
Domain
Mobile application security, AI-driven engineering, SaaS
Deliverable
production ML models | product features
Required skills
iOS/Android platform security models, OWASP Mobile Top 10, binary reverse engineering, dynamic instrumentation, OAuth/PKCE flows, certificate pinning, jailbreak/root detection, secure code review (Swift/Kotlin/Java/React Native), threat modeling, AI development workflows, prompt engineering
Preferred skills
Runtime Application Self-Protection (RASP) evaluation, mobile CI/CD pipeline integration, bug bounty participation, CVE disclosures, open-source mobile security contributions
Technologies
Xcode, Android Studio, Frida, NowSecure, objection, MobSF, Burp Suite, Salesforce Agentforce
Responsibilities
Perform manual and automated security assessments of iOS and Android applications, operate and expand the mobile scanning platform, conduct secure code reviews across mobile codebases, provide mobile security guidance to engineering teams, build and ship high-quality security tooling and automation, design systems where AI agents integrate into security workflows
Seniority
Senior, hands-on IC
