# Software Security Engineer

**Company**: Salesforce
**Experience**: senior
**Job type**: full-time
**Salary**: $148,500 - $313,700 annually
**Category**: Security
**Industry**: Technology

**Apply**: https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/California---San-Francisco/Software-Security-Engineer---SMTS-LMTS-PMTS_JR364952?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_7781a58a-660

## Description

Salesforce is seeking a proactive and skilled Software Security Engineer to join our GCP team. The ideal candidate will be responsible for enhancing our security posture across various domains, focusing on development, vulnerability management, infrastructure security, and the security of distributed and scalable distributed systems.

Responsibilities:

- Security Engineering & Automation: Build and integrate high-performance security tools and custom scripts into our CI/CD pipelines (SAST/DAST, SCA, SIEM) to automate manual toil.

- Infrastructure as Code (IaC): Develop and secure Terraform/IaC templates to ensure our cloud infrastructure is hardened by design before it ever reaches production.

- Vulnerability Leadership: Lead the end-to-end vulnerability lifecycle, using a risk-based approach to prioritize remediation across network, cloud, and application layers.

- Architecture & Threat Modeling: Partner with DevOps and Product teams to conduct threat modeling and architectural reviews, ensuring new features are resilient and scalable.

- Compliance & Governance: Act as the technical lead for audits (SOC2, ISO 27001), leveraging automation to provide evidence of consistent monitoring and timely closure of risks.

- Production Resilience: Troubleshooting and resolving complex security issues in production using distributed tracing and modern monitoring tools.

Requirements:

- Engineering Mindset: 5+ years for SMTS, 7+ years for LMTS; 9+ years for PMTS in Security Engineering with a focus on building tools, not just managing them.

- Coding Proficiency: Strong experience in Go, Java, or Python with a solid grasp of Object-Oriented Programming and automation.

- Cloud & Infrastructure Expertise: Deep experience with GCP (similar) and Terraform for managing cloud security posture (CSPM) and infrastructure.

- Security Domain Knowledge: Practical experience with network protocols, OS hardening (Linux), and modern attack vectors.

- Collaborative Spirit: A desire to work cross-functionally with DevOps to embed security into the SDLC.

Benefits:

- Time off programs

- Medical, dental, vision

- Mental health support

- Paid parental leave

- Life and disability insurance

- 401(k)

- Employee stock purchasing program

## Skills

### Required
- Go
- Java
- Python
- Object-Oriented Programming
- Terraform
- GCP
- CSPM
- Linux

### Nice to have
- container security tools
- open source tools
- secure software development lifecycle practices

---

Source: [Apply at salesforce.wd12.myworkdayjobs.com](https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/California---San-Francisco/Software-Security-Engineer---SMTS-LMTS-PMTS_JR364952?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)