Senior Platform Trust and Safety Engineer

Salesforce•Indianapolis, IN

5d•$148,500 - $246,000

About The Position

Salesforce is seeking a Platform Trust and Safety Engineer for its Platform Defense and Safety team. The team detects and responds to malicious user activity—including misuse, abuse, fraud, and crime—that occurs even when systems are working as designed. The role focuses on identifying and stopping people who exploit Salesforce services for fraud, phishing, account takeover, or other harmful activity. The work covers Core CRM and Marketing Cloud, with potential expansion to additional products. The engineer reviews and responds to abuse reports, builds detection and response rules and automated playbooks, and partners with ethical usage, legal, engineering, product security, and product teams. The position also supports regulatory reporting, including under the EU Digital Services Act, and helps identify tooling needs and assess third-party tools. Applicants should have extensive information security experience involving platform abuse, threat intelligence, incident response, or threat detection, and experience conducting investigations from triage through closure. A related technical degree is required.

Requirements

Extensive experience in information security roles involving platform abuse, threat intelligence, incident response, or threat detection.
Experience managing security or abuse investigations end to end, including triage, evidence collection, risk assessment, containment, escalation, and closure.
Specialization in at least one of log analysis, file-level forensics, or data mining.
Experience authoring detection rules using languages such as YARA or Splunk SPL.
Comfort working from a command line.
A related technical degree.

Nice To Haves

Ability to quickly and effectively understand someone else’s code.
Extensive experience using Splunk for detection engineering and SPL rule authoring.
Experience with threat intelligence tools or teams.
Experience with workflow orchestration or automation platforms such as Temporal.
Experience in a customer-facing role, such as Support or Sales Engineering.
Familiarity with evidence handling, privacy, data retention, and regulatory considerations relevant to security investigations.
Understanding of cloud/SaaS security concepts, multi-tenant platforms, identity systems, and application telemetry.
Experience analyzing large, complex data sets.
Familiarity with Git/GitHub and the Salesforce platform, including Cases and SOQL.
Awareness of emerging trends in digital crime, merchant fraud, and abuse of AI/agentic capabilities.

Responsibilities

Review, triage, and respond to internal and external abuse reports across Core CRM and Marketing Cloud, with potential expansion to new products.
Build and tune detection and response rules in Splunk.
Author and maintain automated response playbooks.
Partner with the Office of Ethical Usage and Legal teams, including on regulatory reporting such as the EU Digital Services Act.
Identify and document anti-abuse tooling requirements for engineering teams.
Evaluate third-party vendor tools to address detection gaps.
Write and maintain clear playbooks, standard operating procedures, and postmortems to drive continuous improvement.
Collaborate with Product Security Advisors, engineering, and product teams, and contribute to platform abuse threat modeling.
Participate in an on-call rotation.