Salesforce
Product Vulnerability Engineer
$117K–$177K
Virginia - Mclean +1 · Office Tech-Flexible · Full-time · Posted Sep 24, 2026
- Location
- Virginia - Mclean
Washington - Bellevue - Experience
- 5–7 years in information security or closely related roles.
- Visa sponsorship
- Must be a U.S. citizen (U.S. born or naturalized) with no dual citizenship, operating on U.S. soil, and agree to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.
About the job
Leads responses to lower- and moderate-severity product vulnerabilities and participates in responses to high-severity vulnerabilities.
What you'll do
- Lead responses to lower- and moderate-severity vulnerabilities and participate in high-severity response.
- Triage multiple vulnerabilities, assess urgency and impact, and develop response plans.
- Analyze application code artifacts and communicate vulnerability scenarios to technical and non-technical colleagues.
What they ask for
- Direct experience in security vulnerability response.
- Ability to triage vulnerabilities and distinguish urgent issues from less urgent ones.
- Experience managing common vulnerabilities, such as OWASP Top 10.
- U.S. citizen (U.S. born or naturalized), without dual citizenship, operating on U.S. soil and able to meet applicable customer and government screening standards.
Nice to have
- Experience in a large, complex organization or reproducing proof-of-concept exploitation steps.
- Cloud application security experience, vulnerability prioritization experience, or relevant security certifications.
Pay
$117,200 - $176,700 annually (base salary)
Tools
OWASP Top 10, Amazon Web Services, GIAC GWAPT, GIAC GCIH, GIAC GPEN, GIAC GXPN, Offensive Security OSCP
Model-written summary · the original posting is authoritative