Senior Product Security Engineer

Salesforce; Bellevue (WA); On-site; USD 180,000 - 240,000; Full time

Job summary

Salesforce is seeking a senior security engineer to join Product Security at scale, focusing on agentic AI safety and secure software delivery across a large enterprise portfolio. You will partner with product engineering teams to identify, validate, and mitigate vulnerabilities in code, cloud services, APIs, and dependencies.

You will validate findings, extend automated tooling, and contribute to rule-based protections.

Qualifications

• 5+ years in security engineering, application security, or adjacent role with at least 2 years hunting vulnerabilities.
• Strong knowledge of at least one major language ecosystem and ability to reason about code.
• Experience with static analysis tooling and writing custom rules.

Responsibilities

• Surface real risk using agentic security systems, static analysis, manual review, and threat modeling.
• Validate findings with hands-on testing; extend tooling to scale analysis.
• Author static analysis rules to block recurring classes at pull-request time.
• Contribute to intake pipelines and set rule-worthy thresholds.
• Provide security consulting on architectural questions across products.
• Scope work effectively in ambiguous, fast-moving environments.

Skills

Security engineering

Application security

Code reading

Static analysis tooling

Threat modeling

Communication skills

Education

Related technical degree

Tools

Semgrep

CodeQL

Static analysis tooling

Job description

Salesforce is seeking a senior security engineer to join Product Security at scale, focusing on agentic AI safety and secure software delivery across a large enterprise portfolio. You will partner with product engineering teams to identify, validate, and mitigate vulnerabilities in code, cloud services, APIs, and dependencies.

You will validate findings, extend automated tooling, and contribute to rule-based protections.