Lead/Sr. Product Security Engineer, M&A (Multiple levels)
To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.
We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.
Trust and security are Salesforce's number one value as a company! We have built a merger & acquisitions security integration team that is responsible for ensuring the security uplift of all Salesforce acquisitions. The Security Engineer will work with acquisitions to threat model their environment, identify risks, track mitigations, and transition the acquisition to other security teams for long term ownership.
We are looking for an individual contributor that wants to use their existing product security, penetration testing, development, operations and infrastructure skills in an outstanding security environment. Work with engineering teams that specialize in acquisition to ensure that our infrastructure and product are secure. The work involved will be focused mostly on product design and product infrastructure assessment, code review, threat modeling, collaborating with acquisition engineering teams integrating to Salesforce standards, assisting acquisition engineering teams remediating issues uncovered during testing.
Salesforce makes multiple acquisitions per year, and each acquisition represents the unknown, ensuring engaging and exciting work that will challenge you technically and provide excellent opportunities to grow your professional abilities! If this sounds like it aligns with your background, why not apply?!
San Francisco (CA), Bellevue (WA), Indianapolis (IN), Herndon (VA), Burlington (MA), Atlanta (GA)
Remote work is available for Senior, Lead and Principal level talent with an outstanding background that aligns with the our job requirements.
Travel requirement of 10%.
What you should have:
Application/product security assurance work with SWE teams
Experience threat modeling SaaS product and infrastructure
Strong IaaS security skills, with a focus on AWS
Strong scripting/development skills (Python, Go, Ruby, Java, Node, etc)
Knowledge of secure software development lifecycle
Experience with static and multifaceted code analysis tools
Experience performing code and infrastructure design reviews
Experience fuzzing applications and protocols
Assembly/exploit development experience
Experience in infrastructure vulnerability assessments and remediation
Bug bounty awards or CVEs
Contributions to the community (open source, presentations, volunteering, etc)
Knowledge of CI/CD standard methodologies
Experience architecting, building, deploying and maintaining security controls
Linux systems engineering/operations
Understanding of Microsoft Windows Server/AD deployment
If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.
At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at www.equality.com and explore our company benefits at www.salesforcebenefits.com.
Salesforce is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce does not accept unsolicited headhunter and agency resumes. Salesforce will not pay any third-party agency or company that does not have a signed agreement with Salesforce.
Salesforce welcomes all.Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.For Washington-based roles, the base salary hiring range for this position is $146,600 to $237,200.For California-based roles, the base salary hiring range for this position is $146,600 to $237,200.Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, benefits. More details about our company benefits can be found at the following link: https://www.salesforcebenefits.com.