Senior Product Security Engineer

Adobe

Confirmed live today High trust

Quick summary

Work type
On-site
Location
San Jose, CA
Salary
$144,800–$261,450 / yr
Employment
Full-time
Posted
39 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $187k
This role $203k
$131k $275k
below market most similar roles pay here above market

This role pays more than 60% of similar roles. Most pay $155,000–$218,650 — the blue band above. At the midpoint, this role pays about $203k versus about $187k for comparable roles.

Based on 240 similar postings.

Employer

About Adobe

Adobe Inc. is a global software company known for creative and multimedia software products including Photoshop, Illustrator, Acrobat, and its cloud-based Creative Cloud and Document Cloud suites. Industry: Creative & Digital Experience Software

Adobe currently has 282 open roles on FindRole.

Listed pay typically runs $148,100–$282,100 across 76 roles with salary data.

Most-posted roles

View all roles at Adobe

At a glance

TL;DR · Senior Product Security Engineer

The Senior Product Security Engineer joins the Product and Software Security team to serve as a frontline responder for external vulnerability reports submitted through the Bug Bounty program. You will triage, validate, and reproduce vulnerabilities across web, API, and mobile surfaces, including those related to AI. Key responsibilities include assigning CVSS scores, communicating with external researchers, and coordinating with engineering teams for remediation. You will also develop PowerBI dashboards and manage automation workflows. Required skills include proficiency in Python, JIRA, and Burp Suite, alongside deep knowledge of OWASP Top 10, LLM testing methodologies, and penetration testing for AI/ML products. You must be able to handle REST API integrations, OAuth2, and event-driven automation using AWS Lambda and API Gateway to secure generative AI products and agentic workflows.

What you'll do

  • Triage, validate, and reproduce incoming vulnerability reports from the bug bounty platform.
  • Assign CVSS scores and severity ratings based on internal guidelines and industry standards.
  • Reproduce proof-of-concept exploits across web, API, and mobile surfaces.
  • Communicate with external researchers to request clarifications and provide status updates.
  • Coordinate with product engineering teams to route confirmed vulnerabilities for remediation.
  • Develop PowerBI dashboards to support data-driven analysis and remediation efforts.
  • Perform penetration testing on AI/ML and LLM-powered products, including chat interfaces and APIs.
  • Build and extend SOAR platform connectors and playbooks for automated security workflows.

What we're looking for

  • Bachelor’s degree or equivalent experience in Computer Science, Engineering, or a related field.
  • 5+ years of practical experience in the field.
  • In-depth knowledge of application security vulnerabilities (OWASP Top 10) and mitigation techniques.
  • Strong understanding of CVSS v3.1 scoring and hands-on experience applying it to real-world vulnerabilities.
  • Proficiency in common web vulnerability classes including XSS, SQL injection, SSRF, IDOR, and authentication flaws.
  • Ability to reproduce and validate PoC exploits using tools such as Burp Suite, browser DevTools, curl, and custom scripts.
  • Hands-on experience in penetration testing of AI/ML and LLM-powered products, including chat interfaces and inference APIs.
  • Proficiency in Python scripting, JIRA, PowerBI, and experience with SOAR/orchestration platforms and API integrations.

More like this

Similar roles

Senior Product Security Engineer

Adobe

San Jose, CA +3 39 days ago
Python OWASP Top 10 AI Prompt Engineering API Orchestration Application Security Vulnerability Management Root-Cause Analysis Automation Playbooks
3+ yrs exp

Senior Product Security Engineer

Cloudflare, Inc

Austin, TX +1 97 days ago
Product Security Application Security AI LLM Threat Modeling STRIDE SAST Fuzzing Penetration Testing Vulnerability Management Bug Bounty JIRA Distributed Systems Agile
Hybrid

Senior Product Security Engineer

PayPal

Austin, TX +1 47 days ago $130,500–$193,600
Python Go Java Javascript Bash Kubernetes Terraform GCP CI/CD SAST SCA Secrets Detection SLSA SBOM Policy-as-Code DevSecOps Telemetry Metrics
3+ yrs exp Hybrid

Senior Product Security Engineer

PayPal

Austin, TX +1 47 days ago $130,500–$193,600
Python Go Bash Java Javascript Kubernetes Terraform GCP CI/CD SAST SCA Secrets Detection SLSA SBOM Policy-as-Code DevSecOps
3+ yrs exp Hybrid

Product Security Engineer

Cloudflare, Inc

Austin, TX +1 84 days ago
AI LLM SAST Fuzzing STRIDE Threat Modeling Penetration Testing Bug Bounty JIRA DevOps Agile Product Security Application Security Vulnerability Management
5+ yrs exp Hybrid

Product Security Engineer

Adobe

New York, NY +2 161 days ago
Python JavaScript React FastAPI Redis Kubernetes Argo Azure OpenAI LLM Prompt Engineering Retrieval-Augmented Generation Vector Databases CI/CD Git Azure GitHub Copilot Cursor Secure SDLC Threat Modeling
4+ yrs exp