Senior (SMTS) Endpoint Security Software Engineer

Salesforce•Bellevue, WA

About The Position

The Enterprise Security Technology team builds and operates highly scalable, fault-tolerant, distributed systems that deliver cloud-scale security infrastructure and software across multiple public cloud platforms and Salesforce's internal infrastructure. One of our key investments is in Endpoint Security, where we build a first-class security defense system for Salesforce's enterprise workloads. As a Senior, Lead, or Principal Endpoint Integration Engineer, you develop, deploy, and operate automation, tools, and internal solutions that address the evolving threat landscape, working closely with architects, senior engineers, product managers, and partner teams. The projects you take on range from building solutions from scratch to automating processes around existing vendor solutions, giving you broad exposure across development, security, and operational work.

Requirements

5+ years (Senior/SMTS) of hands-on security software development experience.
Experience developing automation used in a production environment at a scale of more than ten thousand endpoint systems.
Continuous hands-on experience with scripting or programming, such as Python or Go.
Familiarity with Agile development practices and the secure software development lifecycle.
Ability to perform proof-of-concepts (PoCs) for new technologies that align with evolving security and business needs.
Experience with formal change management processes in an enterprise environment.
Ability to lead initiatives or support team goals in fast-paced environments.
Strong communication and collaboration skills.
Openness to learning and adapting quickly, with a rapid innovation mindset.
Ability to engage in threat modeling and participate in vendor evaluation.

Nice To Haves

Direct experience integrating or operating endpoint protection, security firewall, email security, or exposure management platforms at enterprise scale.
Hands-on experience building detection content or automated response playbooks within a SIEM or SOAR platform.
Experience contributing to infrastructure-as-code or configuration-as-code pipelines in a security operations context.

Responsibilities

Develop security solutions leveraging best development practices and modern tools and approaches.
Utilize knowledge of enterprise security technologies like Extended Detection and Response (XDR), Vulnerability Management, Network Security, and Application Control in the design and development of solutions.
Employ and leverage best security practices to implement software solutions in a large enterprise environment, following change management processes and procedures.
Engage in threat modeling and participate in vendor evaluation.
Assist in proof-of-concepts (PoCs) for new technologies that align with evolving security and business needs.
Contribute to platform enhancements and design decisions.
Support the definition and enforcement of policies, standard operating procedures (SOPs), and operational protocols for endpoint security tools by developing automation and related utilities.
Help ensure endpoint hygiene meets or exceeds regulatory and compliance requirements.
Design and actively participate in the implementation of robust automation pipelines, leveraging Python scripting, to reduce manual effort, enforce consistency, and support rapid incident response.
Work closely with security engineers to contribute toward detection logic and response workflows, collaborating with Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), and telemetry teams to integrate and tune event ingestion, alerting, and remediation across multiple systems.
Develop and maintain scripts and automation in Python to reduce manual operational effort, improve consistency of endpoint configurations, and support faster remediation and response workflows.
Contribute to Continuous Integration and Continuous Deployment (CI/CD), infrastructure-as-code, and configuration-as-code efforts related to endpoint security services.
Partner with Product Management throughout the entire project lifecycle, from initial design and vendor selection to implementation and ongoing operations, ensuring projects are delivered on time and with high quality.
Develop and maintain comprehensive documentation for security services, policies, and procedures.
Stay current with the latest threats and technologies in the cloud security and endpoint security landscape, actively seeking opportunities to innovate and improve our security posture.