Senior Product Security Engineer: Threat Modeling & Secure Code

Salesforce, Inc.; Ashington; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Medical Care

Life Insurance

Retirement Savings

Employee Assistance Programs

13 paid days off per year

Job summary

Salesforce, Inc. is seeking a senior security engineer to join the product security team. You will find, validate, and prevent vulnerabilities across a large enterprise software portfolio, working directly with product engineering teams to surface real risk and propose fixes.

The role emphasizes agentic scanners, static analysis, and threat modeling to improve security decisions and reduce manual validation costs while delivering measurable impact.

Qualifications

• 5+ years in security engineering, application security, or related role.
• Experience shipping custom static analysis rules adopted by developers.
• Hands-on vulnerability discovery capacity (2+ years).

Responsibilities

• Find, validate, and prevent security vulnerabilities across a very large enterprise software portfolio.
• Work directly with product engineering teams to surface real risk and propose fixes.
• Develop and extend agentic security tooling and static analysis rules.
• Contribute to intake pipelines that elevate high-value findings into blocking rules.

Skills

Threat modeling

Static analysis

Vulnerability discovery

Security consulting

Collaboration with engineering teams

Education

Related technical degree

Tools

Semgrep

CodeQL

Job description

Salesforce, Inc. is seeking a senior security engineer to join the product security team. You will find, validate, and prevent vulnerabilities across a large enterprise software portfolio, working directly with product engineering teams to surface real risk and propose fixes.

The role emphasizes agentic scanners, static analysis, and threat modeling to improve security decisions and reduce manual validation costs while delivering measurable impact.