Security Platform Engineer - MTS

Salesforce•Bellevue, WA

About The Position

Salesforce is seeking a Software Engineer (MTS) to design and build compliance automation on the Salesforce Platform within Product Security. This role is ideal for a Salesforce Platform Developer who wants to apply their craft to a high-leverage problem: turning regulatory compliance from a manual, evidence-chasing exercise into an engineered system of record, automated controls, and agent-driven workflows. You will extend our Salesforce-native Security & GRC Platform with new objects, Apex services, Lightning experiences, and Agentforce-powered workflows. You will lead and support AI-enabled tooling development for compliance platforms, risk governance, design reviews, vulnerability management, bug bounty programs, and more.

Requirements

4+ years Salesforce Platform development: Apex, SOQL/SOSL, Lightning Web Components, Flows, Platform Events, and Salesforce APIs (REST/SOAP/Bulk/Streaming)
Strong Apex and SOQL proficiency; working proficiency in SQL and Python for data engineering and integrations
Scalable platform design: Experience designing governor-limit-aware code, data models, and integration patterns (Named Credentials, External Services, async Apex)
Requirements translation: Demonstrated ability to translate complex compliance requirements into precise technical specifications and automated solutions
Data pipeline experience: Designing API integrations and ETL workflows to normalize data from multiple sources into canonical models
Compliance familiarity: Understanding of control testing, evidence collection, and audit requirements (SOC 2, ISO 27001, PCI DSS)—or strong appetite to learn
Ownership mindset: Take end-to-end responsibility for features and outcomes; proactively drive work forward and identify problems before they escalate
Technical excellence and collaboration: Software development background with strong engineering fundamentals; open information sharing, willingness to help teammates succeed, and constructive technical debate
A demonstrated, genuine AI-first approach to engineering. Using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
Experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor, etc.) in development workflows
Advanced prompt engineering skills and the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready.
A related technical degree required.

Nice To Haves

Salesforce certifications: Platform Developer I/II, Application Architect, or System Architect
Experience with Agentforce, Einstein, or LLM frameworks integrated with Salesforce
Experience with compliance automation platforms (Vanta, ServiceNow GRC)
CRM Analytics / Tableau dashboard development for compliance reporting
DevOps on Salesforce: SFDX, source-driven development, CI/CD pipelines (Copado, GitHub Actions)
Compliance as Code (CaC) or policy-as-code engines (OPA, Checkov)
Cloud platform experience (AWS, GCP, Hyperforce) and their compliance/security primitives
Python development experience for automation scripts, integrations, and data engineering workflows
Experience and knowledge of structured and unstructured databases.

Responsibilities

Design and build features on the Security & GRC Platform: Data model extensions, Apex services, triggers, Flows, LWCs, and integrations that operationalize CCF controls across our compliance tooling portfolio.
Implement automated control testing and evidence evaluation: Translate CCF and SFSS requirements into configurable, machine-executable specifications on the platform.
Architect Agentforce workflows: Build LLM-powered workflows for signal triage, root-cause analysis, evidence evaluation, and audit narrative generation grounded in our GRC data model.
Build platform integrations: Connect Security & GRC Platform with enterprise systems (SIEM, cloud providers, HRIS, ticketing, GUS) using Salesforce APIs, Platform Events, and Named Credentials.
Develop monitoring dashboards: Build Lightning experiences and CRM Analytics dashboards that surface real-time control health, compliance drift, and remediation status.
Own data model decisions: Design canonical controls data models, evidence lineage tracking, and semantic normalization—with ownership of schema, sharing rules, and performance.
Partner with audit and engineering: Validate control specifications, test logic, and evidence requirements against SOC 2, ISO 27001, and PCI DSS standards.
Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow by pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale.
Critically evaluate code (Human or AI-generated) for correctness, quality, security, and performance.
Contribute to building and maintaining the shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably.