Lead Product Vulnerability Engineer - Incident Response

salesforce.com, inc.; Bellevue (WA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Product Vulnerability Engineer to join the security team, focusing on vulnerability response and defense across enterprise technology. You will lead responses to lower/moderate vulnerabilities, work with teams to triage issues, and help address high-severity events, while maintaining clear communication with stakeholders.

The role requires strong security fundamentals, forensics capabilities, and experience across web applications and infrastructure.

Qualifications

• 5-7 years in information security or related roles with direct vulnerability response experience.
• Ability to triage multiple vulnerabilities and differentiate urgent issues from important ones.
• Experience with common vulnerability types and security controls.

Responsibilities

• Lead responses to lower/moderate severity vulnerabilities and assist with high-severity events.
• Communicate complex security scenarios clearly to non-technical colleagues.
• Collaborate with cross-functional teams to investigate and resolve issues.

Skills

Vulnerability Response

Incident Response

OWASP Top 10

Application Forensics

Networking Fundamentals

Communication Skills

Threat Research

AWS Security

Job description

Salesforce is seeking a Product Vulnerability Engineer to join the security team, focusing on vulnerability response and defense across enterprise technology. You will lead responses to lower/moderate vulnerabilities, work with teams to triage issues, and help address high-severity events, while maintaining clear communication with stakeholders.

The role requires strong security fundamentals, forensics capabilities, and experience across web applications and infrastructure.