Salesforce
Hyderabad, Telangana, India Posted 2d ago
Salesforce is seeking a Product Security Engineer within the Security Foundations team to secure customer data and assets while balancing risk and security posture. You will drive risk outcomes and help maintain trust for customers through proactive discovery and remediation of emerging risk patterns.
Key Responsibilities
Collaborate with Product Management and Engineering teams to drive accountability for implementing mitigation steps and resolving issues at their root cause.
Drive adoption of proactive security measures and guardrails such as automated secure coding checks and centralized input validation libraries.
Update organizational standards, policies, and procedures to prevent systemic flaws from being re-introduced.
Educate developers on secure coding practices and common systemic flaws.
Influence Product Management and Engineering roadmaps to drive architectural improvements and adopt secure-by-default features.
Review technical design, architecture documentation, or source code for product features.
Triage security findings, alerts, or bug reports to find common patterns representing widespread or recurring security issues.
Validate security issues with a proof-of-concept to confirm exploitability when necessary.
Develop scalable approaches for risk remediation, mitigation, and prevention including Agentic AI and process automation.
Frame engineering risks to enterprise and other Security partners up to C-suite leaders.
Requirements
Bachelor's degree in Computer Science, Engineering or related field, or equivalent training, fellowship, or work experience.
Proven communication, collaboration, and interpersonal skills with the ability to communicate complex technical concepts.
An attacker's mindset considering abuse and attack paths alongside defensive recommendations.
A passion around improving the security development lifecycle and delivering security guidance.
Ability to work with data, identify trends, and propose comprehensive mitigations.
Experience participating in an information security program and improving a secure development lifecycle.
Threat modeling of security topics across infrastructure security and application security domains.
Preferred Qualifications
Proven ability to drive enterprise-ready features to release prioritizing Trust without sacrificing usability.
Strong technical aptitude comfortable engaging with engineering on architecture, APIs, and platform implications.
Experience working with InfoSec, Legal, and IT stakeholders at Fortune 500 companies.
Demonstrated expertise in navigating security incident response efforts.
Strategic thinker with an understanding of the evolving global threat landscape.
Familiarity with NIST standards, specifically NIST CSF 2.0 and NIST 800-53.
