Product Security Engineer
Salesforce1 day ago
Hyderābād, IndiaSenior
Responsibilities
- Identify systemic application, infrastructure, cloud, and product security risks through attack surface management and targeted hands-on assessments.
- Review technical designs, architecture documentation, and source code to identify security issues and recurring anti-patterns.
- Triage security findings, alerts, and bug reports; investigate complex vulnerabilities and prepare root cause analyses.
- Validate exploitability with proof-of-concept testing and develop scalable remediation, mitigation, and prevention approaches.
- Partner with product and engineering teams to drive remediation, secure-by-default features, automated secure coding checks, input validation, and access controls.
- Improve security development lifecycle standards, policies, procedures, and proactive security controls.
- Educate developers on secure coding practices and systemic security flaws.
- Communicate risk and remediation strategies to security partners, engineering teams, product leaders, and executive stakeholders.
Requirements
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent training, fellowship, or work experience.
- Experience participating in an information security program and improving or proposing improvements to a secure development lifecycle.
- Knowledge of application security, infrastructure and cloud security, secure coding, security architecture, threat modeling, access control, session authentication, and API security.
- Ability to identify security trends, uncover systemic flaws, and propose comprehensive mitigations.
- Understanding of secure Salesforce org configuration and use of Agentic AI for risk detection and evaluation.
- Strong communication, writing, presentation, collaboration, and interpersonal skills.
- Preferred qualifications include experience driving enterprise-ready features, engaging with engineering on architecture and APIs, working with InfoSec, Legal, and IT stakeholders, handling complex security incidents, and engaging executive leadership.
- Familiarity with NIST CSF 2.0 and NIST 800-53.
Benefits
- Salesforce states that its benefits and resources support balance and employee well-being.
- Salesforce is an equal opportunity employer and provides reasonable accommodations during the application and recruiting process.
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.