PMTS

Salesforce•Washington, DC

1d•$148,500 - $344,700

About The Position

Salesforce is seeking a proactive Software Security Engineer for its GCP team to strengthen security across development, vulnerability management, infrastructure, and distributed systems. The role focuses on engineering systems and automated tools that prevent vulnerabilities and secure a distributed microservices architecture on Google Cloud Platform. The engineer will build security capabilities that support the broader engineering organization.

Requirements

Security engineering experience focused on building tools: 5+ years for SMTS, 7+ years for LMTS, or 9+ years for PMTS.
Strong experience with Go, Java, or Python, and a solid understanding of object-oriented programming and automation.
Deep experience with GCP or similar cloud platforms and Terraform for cloud security posture management and infrastructure.
Practical experience with network protocols, Linux operating system hardening, and modern attack vectors.
Ability and interest in working cross-functionally with DevOps to embed security into the software development lifecycle.

Nice To Haves

Experience with secure software development lifecycle practices.
Familiarity with container security tools such as Docker and Kubernetes.
Experience building or contributing to open-source tools.

Responsibilities

Build and integrate high-performance security tools and scripts into CI/CD pipelines, including SAST, DAST, SCA, and SIEM capabilities.
Develop and secure Terraform and other infrastructure-as-code templates so cloud infrastructure is hardened before production.
Lead the vulnerability lifecycle and prioritize remediation across network, cloud, and application layers using a risk-based approach.
Partner with DevOps and Product teams on threat modeling and architectural reviews.
Serve as technical lead for SOC 2 and ISO 27001 audits, using automation to provide evidence of monitoring and timely risk closure.
Troubleshoot and resolve complex production security issues using distributed tracing and modern monitoring tools.