Software Engineering, MTS, Security and Network Defense

Salesforce•Bellevue, WA

About The Position

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. The Experience The Email Security & Network Defense (ESND) team protects the enterprise by engineering adaptive defense systems across email, network edge, secure browsing, application control, and emerging AI workflows. As a Software Engineering, MTS on this team, you build and maintain the security architecture that keeps Salesforce resilient against evolving threats, using an automation-first philosophy and Agile execution to deploy modern defenses without slowing business momentum. You use Artificial Intelligence (AI) as a core part of your engineering workflow, working alongside AI agents to design, build, and govern secure systems at scale.

Requirements

3+ years of experience working in a large-scale, enterprise security environment.
Experience building software in one or more languages such as Golang, Python, Java, or similar.
Experience automating infrastructure or operational workflows using scripting languages (e.g., Bash, Python) and tools like Terraform/Ansible.
Proficient with container-based development and CI/CD workflows.
Understand Amazon Web Services (AWS) cloud infrastructure and services, including containers, Kubernetes, and microservices architecture.
Demonstrated, genuine AI-first approach to engineering, using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
Experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor, etc.) in development workflows, with advanced prompt engineering skills and the ability to write precise, structured prompts that cultivate the system context making AI outputs reliable, secure, and production-ready.
Proven track record of developing and maintaining documentation for security processes and procedures.
Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

Nice To Haves

Experience automating workflows or in DevSecOps
Experience with application control, secure browser, Socket firewall, Proofpoint, or SASE platforms.
Experience securing AI and Large Language Model (LLM) workflows, encompassing the protection of agentic pipelines, model-serving endpoints, and technical supply chains through application control.
CISSP, CCSP, CISM, Security+, or similar security or network certification.

Responsibilities

Develop security solutions leveraging best development practices and modern AI tools and approaches.
Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
Contribute to Infrastructure-as-Code automation efforts to provision and manage security systems, ensuring version-controlled and repeatable deployments across global environments.
Develop and maintain Configuration-as-Code for policy governance for security configurations, using Continuous Integration/Continuous Delivery (CI/CD) pipelines to validate and deploy changes, guaranteeing that security tooling is auditable and peer-reviewed.
Support and maintain application control policies, tuning, and ongoing management to ensure effective enforcement across the organization.
Support and maintain secure internet access solutions, including Secure Access Service Edge (SASE) architectures, TLS inspection (TLSi), and secure browser technologies.
Design and orchestrate systems where AI agents integrate seamlessly into security workflows, driving efficiency and innovation at scale.
Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably, and critically evaluate code (human- or AI-generated) for correctness, quality, security, and performance.
Collaborate with cross-functional teams, including Security, Information Technology (IT), and the Computer Security Incident Response Team (CSIRT), to enhance security controls.
Develop and maintain documentation for security processes and procedures.
Identify and implement improvements to security systems and processes.