Senior Product Security Engineer – Threat Modeling

salesforce.com, inc.; San Francisco (CA); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce is seeking a senior security engineer to join Product Security at scale. You will surface real risk across a broad software portfolio using agentic systems, static analysis, and threat modeling.

You’ll validate findings, extend tooling, and help craft merge-blocking rules while advising on architectural questions with product teams. Ideal candidates have hands-on vulnerability discovery experience, deep coding knowledge in multiple ecosystems, and strong communication.

Qualifications

• 5+ years in security engineering or related role.
• Hands-on vulnerability discovery experience.
• Familiarity with static analysis tooling and writing rules.

Responsibilities

• Surface real risk using agentic security systems, static analysis, and threat modeling.
• Validate findings, extend tooling, and reduce manual validation costs.
• Create static analysis rules to block common classes of vulnerabilities at PR time.
• Help graduate high-value findings into merge-blocking rules and set criteria for evaluation.
• Provide security consulting on architectural questions and guide scope across products.

Skills

Security engineering

Vulnerability discovery

Static analysis tooling

Threat modeling

Authentication design

Communication skills

Software development

Education

Technical degree

Tools

Semgrep

CodeQL

Job description

Salesforce is seeking a senior security engineer to join Product Security at scale. You will surface real risk across a broad software portfolio using agentic systems, static analysis, and threat modeling.

You’ll validate findings, extend tooling, and help craft merge-blocking rules while advising on architectural questions with product teams. Ideal candidates have hands-on vulnerability discovery experience, deep coding knowledge in multiple ecosystems, and strong communication.