Senior Product Vulnerability Engineer

salesforce.com, inc.; McLean (VA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Product Vulnerability Engineer to join a leading vulnerability response team. You will lead responses to lower/moderate severity vulnerabilities and participate in high-severity triage, coordinating remediation with product, engineering, and security partners.

The role requires 5-7 years in information security with vulnerability response experience, strong analytical and communication skills, and familiarity with OWASP Top 10, web proxy tools, and AWS. U.S.

Qualifications

• 5-7 years in information security or closely related roles, with direct vulnerability response experience.
• Ability to triage multiple vulnerabilities and differentiate urgent issues from important ones.
• Strong analytical thinking, planning, and decision-making in high-pressure situations.
• Experience with common vulnerability types including OWASP Top 10.
• Familiarity with web proxy tools, network protocols and application architectures.
• Experience with incident response and information security concepts.

Responsibilities

• Lead response to lower/moderate severity vulnerabilities and participate in high severity triage.
• Assess impact, coordinate remediation, and communicate findings to non-technical stakeholders.
• Collaborate with product, engineering, and security teams to reduce risk.

Skills

Vulnerability response

Vulnerability triage

OWASP Top 10

Network fundamentals

Web proxy tools

Incident response

Communication skills

Research skills

Tools

AWS

Job description

Salesforce is seeking a Product Vulnerability Engineer to join a leading vulnerability response team. You will lead responses to lower/moderate severity vulnerabilities and participate in high-severity triage, coordinating remediation with product, engineering, and security partners.

The role requires 5-7 years in information security with vulnerability response experience, strong analytical and communication skills, and familiarity with OWASP Top 10, web proxy tools, and AWS. U.S.