About the role

Trust is Salesforce's #1 value. Within the Salesforce Trust Platform (STP), the Trust Intelligence Platform (TIP) engineering organization builds the 360° security-intelligence layer protecting every Salesforce asset across our public-cloud substrates and private infrastructure. Inside TIP, the Trusted Supply Chain (TSC) team owns the services that secure the design, code, build, and run phases of the Salesforce SDLC - used by thousands of internal developers shipping the world's largest SaaS platform.

As Lead MTS in TSC, you will own the architecture and engineering roadmap for our trusted-supply-chain platform: third-party-package security, vulnerability management, attribution, remediation, and runtime defense. You will be the authoritative voice on technical tradeoffs, the most active evangelist for next-generation security engineering, and the mentor who raises the technical bar for the engineers around you.

This is a builder's role for a senior IC who wants to define what supply-chain security looks like in the agentic-AI era - not just instrument the SDLC, but redesign it.

What you will do

* Own the architecture vision and multi-year roadmap for Salesforce's Trusted Supply Chain platform — scanning, attribution, remediation, and runtime defense across public cloud and private infrastructure.
* Lead the AI-native rebuild of our supply-chain stack. Design and ship agentic systems that triage findings, author fixes, validate them in CI, and close the loop without human keystrokes for the well-understood cases - freeing engineers to focus on novel risk.
* Champion operational excellence. Feed incident learnings back into design. Build for fault isolation, graceful degradation, and observability from day one.
* Partner with PMs and EMs on build-vs-buy decisions and time-to-market vs. long-term sustainability tradeoffs.
* Coach Salesforce application teams on supply-chain and AppSec best practices; be the voice of TSC in the Salesforce Principal community.
* Track and adopt the most relevant trends in supply-chain security, agentic AppSec, ML-assisted vulnerability discovery, secure software development, and AI safety.
* Mentor engineers — advocate for their contributions and career development; raise the technical bar across the team.

Required skills and experience

* M.S. or Ph.D. in Computer Science or equivalent practical experience.
* 10+ years building applications or systems software at scale.
* 5+ years in public-cloud environments with container-based technologies (Docker, Kubernetes, Istio, service mesh).
* Strong, active coding skills in at least two of Go, Java, Python, Rust, C# , with deep attention to code quality and secure-by-default patterns.
* Experience with stateful, service-oriented architectures and the design tradeoffs they impose (consistency, partitioning, recovery).
* Experience with relational and NoSQL stores and pub/sub messaging (Kafka, RabbitMQ, SQS).
* Demonstrated ability to define technology strategy and execute multi-year roadmaps through ambiguity.
* Track record of incremental architectural evolution, refactoring, and safely prototyping new features in production.
* Excellent written and verbal communication; proven ability to drive alignment with executives, peers, and engineers on contentious technical decisions.

AI / agentic engineering

This role is for someone who will build the next supply-chain stack, not just specify it.

We expect:
* Hands-on experience building production systems with LLMs - RAG pipelines, function/tool calling, structured output, evals, guardrails.
* Working knowledge of agentic patterns: multi-agent orchestration, planner/executor loops, tool-augmented reasoning, agent memory and context management, human-in-the-loop checkpoints.
* Practical fluency with the modern AI developer stack — at least one of: Anthropic Claude / OpenAI / similar foundation-model APIs; agent frameworks (LangGraph, CrewAI, AutoGen, or equivalent); MCP (Model Context Protocol); evaluation harnesses (LangSmith, Braintrust, custom).
* Proven daily use of AI-assisted coding tools (Claude Code, Cursor, Copilot) including authoring custom agents, slash commands, hooks, and skills — and a clear point of view on when to use them and when not to.
* A realistic posture on AI safety and reliability: prompt-injection defense, sandboxing untrusted tool calls, deterministic test harnesses, regression evals, cost/latency budgeting, and graceful degradation when the model gets it wrong.

Why this role

Salesforce balances employee well-being with high achievement. This is a customer-facing role with a tight feedback loop - you ship, our developer audience uses it, you see the impact in days, not quarters. There is real room for experimentation: the TSC platform is being rebuilt to be AI-native, and the person in this seat will help draw the lines.

You will work alongside the best security engineers in the industry, on problems that genuinely matter to a platform that thousands of developers and tens of thousands of customers depend on every day.