Product Security Senior

Salesforce
Bellevue, San Francisco
Workplace: OnsiteFull timeUSD 148,500 - 223,900 annuallyFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Communication","Written communication","Verbal communication","Ability to work in ambiguity","Engineering judgment"]

Partner with product engineering teams to find, validate, and prevent security vulnerabilities across a large enterprise software portfolio. Use agentic security systems, custom static analysis, manual review, and threat modeling to surface real, exploitable risk and reduce validation cost. Author and tune merge-blocking static analysis rules, help build the intake pipeline, and advise on hard architectural security questions. Your impact is measured through detections shipped and vulnerabilities closed.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Salesforce
Salesforce
4 days ago

Product Security Senior

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 15 hours agoStatus: Live

Job Summary

Partner with product engineering teams to find, validate, and prevent security vulnerabilities across a large enterprise software portfolio. Use agentic security systems, custom static analysis, manual review, and threat modeling to surface real, exploitable risk and reduce validation cost. Author and tune merge-blocking static analysis rules, help build the intake pipeline, and advise on hard architectural security questions. Your impact is measured through detections shipped and vulnerabilities closed.
Location: Bellevue, San Francisco
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Use agentic security systems, custom static analysis, manual review, and threat modeling to surface real risk.
  • •Validate findings to determine whether vulnerabilities are actually triggerable, and extend automated tooling to reduce manual validation cost.
  • •When vulnerability classes recur, author static analysis rules that block the class at pull-request time.
  • •Contribute to an intake pipeline that turns high-value findings into merge-blocking rules and decide which findings meet the rule-worthy bar.
  • •Provide security consulting on hard architectural questions and use a scoping methodology across products.

Pay and Benefits

Salary: USD 148,500 - 223,900 annually
Perks:MedicalDentalVisionHealth InsurancePaid ParentalLife InsuranceDisability Insurance401kEquity

Key Requirements

  • •5+ years in security engineering, application security, or a directly adjacent role, with at least 2 years in hands-on vulnerability discovery.
  • •Deep familiarity with at least one major language ecosystem (Java, Python, JavaScript/TypeScript, Go, Ruby, or similar) and the ability to read and reason about code in others.
  • •Hands-on working knowledge of static analysis tooling and how custom rules are authored, tuned, and maintained (Semgrep, CodeQL, or equivalent).
  • •Practical experience with at least one: threat modeling, authentication/authorization design, cloud security architecture, or supply chain security.
  • •A related technical degree required; also comfortable operating in ambiguity with excellent written and verbal communication.
Experience:5+ years
Education:
Skills:CommunicationWritten communicationVerbal communicationAbility to work in ambiguityEngineering judgment
Tech Stack:JavaPythonJavaScript/TypeScriptGoRubySemgrepCodeQLStatic analysisThreat modelingAuthentication and authorizationRBACABAC

Company Brief

Salesforce
Provides a leading cloud-based customer relationship management (CRM) platform with sales, service, marketing, analytics, and integration tools that empower businesses to manage customer relationships and digital transformation at scale.
Industry: SaaS
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 1999
Glassdoor
Glassdoor: 4.1
WebsiteLinkedInGlassdoor