Senior Platform Trust and Safety Engineer

Salesforce•Bellevue, WA

11d

About The Position

Salesforce is seeking a dedicated Platform Trust and Safety Engineer to identify and stop abusers who commit fraud, phishing, and account takeover, or who otherwise use their services to make the internet a hostile space. The Platform Defense and Safety (PDS) team detects and responds to malicious user activity, including misuse, abuse, fraud, and crime, that occurs even when systems are functioning as designed. Bad actors constantly attempt to bypass detection and response systems by posing as legitimate customers to gain an unfair advantage. Unlike account compromise, abuse is often a gradual problem rather than a single event.

Requirements

Extensive experience in information security roles involving platform abuse, threat intelligence, incident response, or threat detection.
Experience managing security or abuse investigations end to end: triage, evidence collection, risk assessment, containment, escalation, and closure.
Specialization in at least one of: log analysis, file-level forensics, or data mining.
Experience authoring detection rules using languages such as YARA or Splunk SPL, and comfort working from a command line.

Nice To Haves

Ability to quickly and effectively understand someone else's code.
Extensive experience using Splunk for detection engineering and SPL rule authoring.
Experience with threat intelligence tools or teams.
Experience with workflow orchestration or automation platforms (e.g., Temporal).
Experience in a customer-facing role (Support, Sales Engineering, etc.).
Familiarity with evidence handling, privacy, data retention, and regulatory considerations relevant to security investigations.
Understanding of cloud/SaaS security concepts, multi-tenant platforms, identity systems, and application telemetry.
Experience analyzing large, complex data sets, and familiarity with Git/GitHub and the Salesforce platform (Cases, SOQL).

Responsibilities

Review, triage, and respond to external and internal abuse reports across Core CRM and Marketing Cloud, with an eye toward expanding into new products.
Build and tune detection and response rules in Splunk, and author and maintain automated response playbooks.
Partner with our Office of Ethical Usage and Legal teams, including on regulatory reporting such as the EU Digital Services Act (DSA), to keep our platforms free of malicious content.
Identify and document anti-abuse tooling requirements for engineering teams, and evaluate third-party vendor tools to close detection gaps.