Salesforce Security & Identity SME

Launch Group; City of Melbourne; Hybrid; AUD 120,000 - 180,000; Part time

Job summary

Launch Group in Melbourne is seeking an experienced Salesforce Security & Identity SME to strengthen security controls across the Salesforce environment. You will focus on security hardening, vulnerability remediation, identity management and data protection.

The role involves working closely with Cyber Security and Salesforce Application teams, implementing practical remediation and enhanced controls, and maintaining clear documentation of findings and decisions.

Qualifications

• Hands-on Salesforce security and identity/access management experience.
• Experience with Salesforce platform hardening.
• Knowledge of Salesforce authentication, authorization and access control models.
• Experience configuring OWD, profiles and permission sets.
• Strong MFA and identity security controls knowledge.
• Experience reviewing Connected Apps, OAuth and API/security.
• Understanding of Salesforce data protection and access security.
• Vulnerability assessment and remediation in Salesforce environments.
• Exposure to AppOmni or similar SaaS security tools.
• Stakeholder management across Cyber Security and Salesforce teams.
• Proficient with JIRA, Confluence, MS Office, Visio.

Responsibilities

• Work with Cyber Security and Salesforce teams to remediate findings.
• Assess and remediate Salesforce vulnerabilities identified via SaaS security tools.
• Strengthen MFA and authentication controls.
• Implement least-privilege access based on roles.
• Configure Salesforce data security controls to reduce data risk.
• Review login IP restrictions and access policies.
• Conduct security reviews of Connected Apps and OAuth configurations.
• Review and strengthen API and integration security patterns.
• Configure and review Salesforce access controls, including OWD, profiles and permission sets.
• Support improvements to security monitoring, alerting and visibility.
• Maintain documentation of security findings and remediation actions.
• Proactively identify and communicate security risks and remediation options.

Skills

Salesforce security

Identity management

MFA

Least-privilege access

OWD & profiles

OAuth & API security

Data protection

Vulnerability remediation

AppOmni familiarity

Security monitoring

Stakeholder management

JIRA & Confluence

Visio

Tools

AppOmni

JIRA

Confluence

Microsoft Office

Visio

Job description

Role Purpose

We are seeking an experienced Salesforce Security & Identity SME to work closely with Cyber Security and Salesforce Application teams to strengthen security controls across the Salesforce environment. The role will focus on Salesforce security hardening, vulnerability remediation, identity and access management, data protection, and security monitoring. You will assess existing security findings and work with technical and business stakeholders to implement practical remediation and enhanced security controls.

Location

Melbourne

Role Type

3 days in the office

Duration

6 month contract

Key Responsibilities

• Work with Cyber Security and Salesforce Application teams to prioritise and remediate findings from security health checks.


• Assess, prioritise and remediate Salesforce vulnerabilities identified through AppOmni or similar SaaS security platforms.


• Strengthen Salesforce authentication and access controls, including Multi-Factor Authentication (MFA).


• Implement and maintain least-privilege access based on user role and business function.


• Configure and enhance Salesforce data security controls to reduce the risk of unauthorised access or bulk data extraction.


• Review and implement appropriate login IP restrictions and access policies.


• Conduct security reviews of Connected Apps and OAuth configurations.


• Review and strengthen API and integration security patterns.


• Configure and review Salesforce access controls, including Organisation-Wide Defaults (OWD), profiles and permission sets.


• Support improvements to security monitoring, alerting and overall visibility across the Salesforce environment.


• Maintain clear documentation of security findings, remediation activities, controls and decisions.


• Proactively identify and communicate security risks, issues and remediation options.

Required Skills & Experience

• Strong hands-on experience in Salesforce security and identity/access management.


• Demonstrated experience with Salesforce platform and organisation hardening.


• Strong knowledge of Salesforce authentication, authorisation and access control models.


• Experience configuring OWD, profiles, permission sets and least-privilege access.


• Strong understanding of MFA and identity security controls.


• Experience reviewing Connected Apps, OAuth and API/integration security.


• Understanding of Salesforce data protection and access security.


• Experience undertaking vulnerability assessment and remediation within Salesforce environments.


• Exposure to AppOmni or similar SaaS security/vulnerability management platforms would be highly regarded.


• Strong stakeholder management skills with the ability to work across Cyber Security and Salesforce/Application teams.


• Confident using JIRA, Confluence, Microsoft Office and process-modelling tools such as Visio.

Certifications

Candidates should ideally hold one or more of the following:

• Salesforce Certified Platform Identity and Access Management Architect, or


• Salesforce Certified Administrator

Additional Salesforce architecture or security certifications would be highly regarded.