Senior Product Security Engineer (Agentic AI)

100 Salesforce, Inc.; Bellevue (WA); On-site; USD 149,000 - 224,000; Full time

Benefits offered by this job

Time off programs

Medical

Dental

Vision

Mental health support

Paid parental leave

Life and disability insurance

401(k)

Employee stock purchasing program

Job summary

Salesforce is seeking an experienced Security Engineer to join the Experience Product Security team. You will surface real risks using agentic security systems, static analysis, and threat modeling, while reducing manual validation through tooling enhancements.

You will contribute to scalable security practices across products, author mandatory analysis rules, and collaborate with product teams on architectural security decisions. This role requires strong communication and a technical degree.

Qualifications

• 5+ years in security engineering, application security, or a directly adjacent role.
• At least 2 years in a hands-on vulnerability-discovery capacity.
• Familiarity with one or more major language ecosystems and ability to read code in others.
• Experience with static analysis tooling and writing/maintaining rules (Semgrep, CodeQL, or equivalent).
• Experience with threat modeling, authentication/authorization design, cloud security architecture, or supply chain security.

Responsibilities

• Use agentic security systems, static analysis, manual review, and threat modeling to surface real risk.
• Extend automated tooling to reduce manual validation cost.
• Develop static analysis rules to block repetitive vulnerabilities at PR time.
• Contribute to intake pipeline that escalates high-value findings to merge-blocking rules.
• Provide security consulting on architectural questions.
• Apply scoping methodology across products and measure impact through detections and remediation.

Skills

Security engineering

Vulnerability discovery

Java/Python/JS

Static analysis tooling

Threat modeling

Authn/Authz design

Cloud security

Supply chain security

Communication

Education

Technical degree

Tools

Semgrep

CodeQL

Job description

Salesforce is seeking an experienced Security Engineer to join the Experience Product Security team. You will surface real risks using agentic security systems, static analysis, and threat modeling, while reducing manual validation through tooling enhancements.

You will contribute to scalable security practices across products, author mandatory analysis rules, and collaborate with product teams on architectural security decisions. This role requires strong communication and a technical degree.