Product Security Engineer
Salesforce · Posted Sep 15
Customer relationship management, cloud computing, enterprise software, and artificial intelligence solutions
India - HyderabadFull-timeHybridSenior Level5–9 years₹35.0L–₹60.0L yearly100+ applicants
Cloud ComputingEnterprise SoftwareCustomer Relationship ManagementArtificial IntelligenceSaaSPublic Company
Full time
Get a personal compatibility score
Add a resume for personal matches
About the role
Salesforce's Product Security team within the broader Security organization is at the forefront of securing customer data and assets while balancing risk and security posture, thriving on collaboration with product and engineering teams to drive risk outcomes and maintain customer trust. This role sits on the Security Foundations team and focuses on proactive discovery and remediation of emerging risk patterns via Attack Surface Management and targeted hands-on security assessments, leading investigations into and coordinating remediation for systemic risks across Salesforce's products.
What you will do
- This role is on the Security Foundations team within our product security organization, and requires a blend of real-world experience and deep knowledge in software security, including application security, cloud security, secure coding practices, and security architecture, with a specific focus on application and infrastructure risk identification and remediation. These risks may be strategic in nature, impacting multiple products or tools.
- This role is focused on proactive discovery and remediation of emerging risk patterns via Attack Surface Management and targeted hands-on security assessments.
- The ideal candidate will have a proven track record of identifying systemic risk through uncovering of underlying common patterns representing systemic flaws, investigating and drafting Root Cause Analyses for complex vulnerabilities, and configuring/analyzing/triaging risk signals from monitoring and detection tooling. This role is responsible for leading investigations into, and coordinating remediation for systemic risks across Salesforce’s products.
- Collaborate with Product Management & Engineering teams to drive accountability for implementing mitigation steps across affected areas and to resolve issues at their root cause.
- Drive adoption of proactive security measures and guardrails, such as automated secure coding checks, centralized input validation libraries, and robust access control mechanisms.
- Update organizational standards, policies and procedures as necessary to prevent systemic flaws from being re-introduced.
- Educate developers on secure coding practices and common systemic flaws.
- Influence Product Management & Engineering roadmaps to drive architectural improvements and adopt secure-by-default product features.
- Review technical design and architecture documentation or source code for product features.
- Triage security findings, alerts or bug reports to find common patterns representing widespread or recurring security issues.
- Identify variants or broadly similar instances of existing security anti-patterns using commercial, custom, and/or open-source code and runtime testing tools.
- Validate security issues with a proof-of-concept to confirm exploitability when necessary.
- Collaborate with engineers and developers to build context required to pinpoint and articulate risk.
- Develop scalable approaches for risk remediation, mitigation, and prevention. These should include Agentic AI and process automation.
- Frame engineering risks to enterprise and other Security partners at levels of seniority up to and including C-suite leaders.
- Collaborate with other security teams to incorporate lessons learned from risk identification and remediation into proactive controls.
- Engage in executive forums, as necessary, to articulate risk remediation strategies in a manner that resonates with the audience.
- Rapidly adapt to new and emerging high-risk areas, effectively persuading stakeholders to pivot priorities where required.
Skills used in this role
Application SecurityCloud SecuritySecure CodingSecurity ArchitectureThreat ModelingAttack Surface ManagementVulnerability AssessmentRoot Cause AnalysisAPI SecuritySession AuthenticationAccess ControlSecure Development LifecycleInformation SecurityInfrastructure SecurityCode ReviewSalesforceAgentic AINIST CSF 2.0NIST 800-53CommunicationCollaborationProblem Solving
What the employer is looking for
- Bachelor’s degree in Computer Science, Engineering or related field, or equivalent training, fellowship, or work experience is required
- Proven communication, collaboration, and interpersonal skills with the ability to effectively communicate complex technical concepts to diverse audiences, including technical and non-technical teams.
- An attacker’s mindset; consider abuse and attack paths as well as the defensive mindset to recommendations to prevent them
- A passion around improving the security development lifecycle and delivering security guidance to engineers in a language they understand.
- Ability to work with data, identify trends and propose comprehensive mitigations that eradicate systemic security concerns.
- Experience participating in an information security program and improving or proposing improvements to a secure development lifecycle
- Threat modeling of security topics across infrastructure security & application security domains. Understanding of, or experience managing infrastructure and platform access control models, best practices for configuring secure Salesforce orgs, session authentication and API security best practices, and use of Agentic AI to streamline risk detection and evaluation.
- Excellent writing and presentation skills.
- Possess the ability to communicate concisely, clearly, and intelligently to cross functional teams.
Preferred qualifications
- Proven ability to drive enterprise-ready features to release prioritizing Trust without sacrificing usability
- Strong technical aptitude; comfortable engaging with engineering on architecture, APIs, and platform implications
- Experience working with InfoSec, Legal, and IT stakeholders at Fortune 500 companies
- Demonstrated expertise in navigating security incident response efforts, including direct engagement with executive leadership, legal counsel, and external parties to resolve complex security issues.
- Strategic thinker with an understanding of the evolving global threat landscape and its implications for millions of users.
- Familiarity with NIST standards, specifically NIST CSF 2.0 and NIST 800-53
Benefits and support
- When you join Salesforce, you’ll be limitless in all areas of your life.
- Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best.
- If you need a reasonable accommodation during the application or the recruiting process, accommodations are available.
About Salesforce
Salesforce, Inc. is a leading global cloud-based enterprise software company specializing in customer relationship management (CRM) and artificial intelligence solutions. Through its integrated Customer 360 platform, the company provides applications for sales, customer service, marketing automation, e-commerce, and analytics. Powered by innovations like Agentforce, Salesforce helps businesses bridge human capability with autonomous AI agents to drive customer success.
- Industry
- Cloud Computing
- Company size
- 87000+ employees
- Founded
- 1999
- Location
- San Francisco, California, USA
- Funding stage
- Public Company
Funding
Public Company · $25B raised
Emergence CapitalMeritech Capital PartnersSunBridgeStarboard ValueWilliam Hambrecht
- 2026-03Post-IPO Debt$25B
- 2003-01Venture Round$1M
- 2001-06Series D$46.9M
- 1999-11Series C$13.2M
- 1999-06Series B$3.8M
Leadership
MB
Marc Benioff
Chair, Chief Executive Officer & Co-Founder
RW
Robin Washington
President & Chief Operating and Financial Officer
PH
Parker Harris
Co-Founder & Chief Technology Officer, Slack
DS
David Schmaier
President & Chief Strategy Officer
Recent coverage
Dealroom
Salesforce to Acquire Listen Labs to Expand AI Research Capabilities2026-09-29
Stock Titan
Salesforce Highlights Margin Expansion and Growth Targets at 2026 Investor Day2026-09-17
Salesforce News
Live Nation Makes Show Day Easier for Fans With Salesforce's Agentforce2026-09-16
Investing.com
Salesforce Prices Record $25 Billion Senior Notes Offering for Share Repurchase2026-03-12