Product Security Senior
Core
Senior security engineer embedding with product teams to find, validate, and prevent vulnerabilities in a large enterprise software portfolio using agentic scanners, custom static analysis, and threat modeling.
Role type
Senior IC product security engineer (AI/Agentic security)
Builds
Production security tooling (static analysis rules, agentic scanners) and secure product features for Salesforce's enterprise portfolio.
Domain
Enterprise SaaS, AI/Agentic security, Cloud security
Deliverable
production ML models | product features
Required skills
Vulnerability discovery and validation, Custom static analysis rule authoring, Threat modeling, Cloud security architecture, Code review and reasoning, Security consulting
Preferred skills
Agentic security tooling experience, RBAC/ABAC authorization models, Bug bounty history, Open source security contributions
Technologies
Semgrep, CodeQL, Agentic scanners, Custom static analysis tools
Responsibilities
Use agentic systems and manual review to surface real risks; Validate findings to distinguish exploitable bugs from noise; Author static analysis rules to block vulnerability classes at PR time; Contribute to intake pipeline for merge-blocking rules; Provide security consulting on architectural questions; Partner with product engineering teams to reduce validation costs.
Seniority
Senior, hands-on IC
