Product Security Vulnerability Engineer

Salesforce; Bellevue (WA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Product Vulnerability Engineer to join the security team in the United States. You will lead the response to lower/moderate severity vulnerabilities and assist with high-severity incidents, applying critical thinking under pressure and coordinating with cross-functional teams.

Ideal candidates have 5-7 years in information security, experience with vulnerability response (OWASP Top 10), web proxy tools, and strong communication skills, with the ability to map

Qualifications

• 5-7 years in information security with vulnerability response experience.
• Ability to triage multiple vulnerabilities, differentiating urgent issues from important ones.
• Ability to reason from facts and plan action under pressure, even in worst cases.
• Experience with common vulnerability types (e.g., OWASP Top 10).
• Familiarity with credential phishing, data spillage, and inadvertent leaks.
• Application forensics to assess impact if exploited.
• Strong written and verbal communication, able to explain complex scenarios to non-technical colleagues.
• Solid basics in networking, protocols, system architecture, and software development.
• Knowledge of web proxy tools and investigative techniques.
• Ability to learn unfamiliar technologies quickly and adapt processes.

Responsibilities

• Lead response to lower/moderate severity vulnerabilities and assist with high-severity incidents.
• Coordinate with cross-functional teams to investigate and resolve vulnerabilities.
• Think critically under pressure and communicate findings clearly.

Skills

Vulnerability response

Information security

Threat assessment

OWASP Top 10

Communication skills

Networking fundamentals

Investigation techniques

Research new tech

Regulatory knowledge

Cross-functional teamwork

Code/artifact analysis

Tools

Web proxy tools

Job description

Salesforce is seeking a Product Vulnerability Engineer to join the security team in the United States. You will lead the response to lower/moderate severity vulnerabilities and assist with high-severity incidents, applying critical thinking under pressure and coordinating with cross-functional teams.

Ideal candidates have 5-7 years in information security, experience with vulnerability response (OWASP Top 10), web proxy tools, and strong communication skills, with the ability to map