application security engineer in AI customer service

Fin, now part of Salesforce, provides AI-powered customer service through its AI Agent Fin, which delivers always-on support across service, sales, and ecommerce. Its products combine proprietary AI models with an integrated help desk to help businesses manage customer experiences.

• Own and engineer tier-zero security capabilities for securely deploying and managing Fin;
• Design, build, and evolve customer-facing security features, including authentication, SAML/SSO, permissions systems, audit and activity logging, malicious URL scanning, and enterprise security controls;
• Partner with engineering teams throughout the software development lifecycle to build secure products and services;
• Perform architecture reviews, threat modelling exercises, and security assessments for new features and systems;
• Build security tooling, automation, and developer-facing building blocks that make secure development easier and more scalable;
• Contribute to secure development standards, guidance, and best practices across Fin;
• Lead application security initiatives across the software development lifecycle and help teams address security risks early;
• Participate in a shared on-call rotation and lead security incident response, investigation, and remediation efforts;
• Drive security initiatives from problem definition through design, implementation, and measurable outcomes;
• Partner with teams building AI-powered products to assess and mitigate emerging security risks;
• Help shape Fin's AI-first approach to security, including AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities;
• Support the secure adoption of AI-assisted software development tools and engineering workflows.

• Proven application security, product security, or security engineering experience within a SaaS environment;
• Strong software engineering skills with experience designing, building, and operating production systems;
• Deep understanding of modern application security threats, secure software development practices, and threat modelling;
• Experience designing, building, or securing authentication, authorization, identity, or enterprise security capabilities;
• Experience conducting architecture reviews and security assessments for complex systems;
• Hands-on security incident response experience, including leading investigations and remediation efforts;
• Strong programming skills and experience building tools, automation, or developer-focused solutions;
• Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness;
• Ability to communicate security concepts clearly and collaborate effectively with engineering teams;
• A pragmatic approach to balancing security, customer impact, and engineering velocity;
• Nice to have: Experience building or owning authentication, SAML/SSO, identity, or access management capabilities, experience securing AI-powered products or familiarity with security considerations for large language models, agentic systems, retrieval-based architectures, or AI tool integrations, experience building security automation or security-focused platform capabilities at scale, familiarity with cloud security, infrastructure security, or distributed systems, experience working across both large-scale SaaS environments and high-growth companies.

• Benefits and resources support health and wellbeing, family, time away from work, and financial security; offerings vary by location;
• Certain roles may be eligible for incentive compensation, equity, and benefits;
• Employees are expected to be in the office at least three days per week.