Salesforce Security Analyst

Sopra Steria; Greater London; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

25 days annual leave

Health cash plan

Life assurance

Pension

Job summary

Sopra Steria in London is seeking a Salesforce Security Analyst to lead security assessments, threat modelling, and architectural reviews for secure Salesforce solutions in a hybrid, full-time role.

You will work with architects, developers, product teams and security specialists to embed security by design across the Salesforce delivery lifecycle, with flexible working options and a clear path for career development. Salary ranges from £55,000 to £75,000 per year, depending on experience.

Qualifications

• 3+ years hands-on Salesforce security experience.
• Experience securing Salesforce platforms, integrations, and reviews.
• Knowledge of SDLC security practices and vulnerability management.
• Experience with threat modelling and security risk assessments.

Responsibilities

• Lead security analysis, threat modelling, and risk assessments for Salesforce features.
• Drive secure-by-design and DevSecOps practices across the lifecycle.
• Support solution architecture activities ensuring security requirements.
• Lead security governance including vulnerability management and secure code reviews.
• Support security incident response and remediation for Salesforce services.
• Provide architectural guidance to project teams and stakeholders.

Skills

Salesforce security

Threat modelling

Security assessments

Architecture reviews

Agile/Waterfall

Job description

Are you passionate about securing Salesforce environments and helping organisations deliver robust, secure digital solutions at scale? Do you enjoy working closely with architects, developers, product teams, and security specialists to ensure security is embedded into every stage of the Salesforce delivery lifecycle?

We're looking for a Salesforce Security Analyst to play a pivotal role in the design, governance, and delivery of secure Salesforce solutions. Working across a range of business-critical projects, you'll lead security assessments, threat modelling, solution reviews, and architectural assurance activities while helping to shape secure-by-design Salesforce implementations. This role offers the opportunity to influence strategic technology decisions, work with a broad stakeholder community, and contribute to the delivery of secure, resilient services that support critical business objectives.

We can offer excellent career development opportunities, flexible working arrangements, industry-recognised training, and the chance to work with experienced Salesforce and Cyber Security professionals within a collaborative and supportive environment.

What you'll be doing:

• Leading security analysis, threat modelling, and risk assessments for Salesforce features, integrations, and platform enhancements.
• Driving the adoption of secure-by-design and DevSecOps principles throughout the Salesforce development lifecycle.
• Supporting solution architecture activities, ensuring Salesforce solutions meet security, business, and technical requirements.
• Leading security governance activities including vulnerability management, secure code reviews, testing assurance, and architecture reviews.
• Supporting security incident response, root cause analysis, and remediation activities relating to Salesforce services.
• Providing architectural guidance and assurance to project teams, suppliers, and stakeholders while ensuring solutions align with organisational security standards and strategic architecture.

What you'll bring:

• At least 3 years' hands‑on Salesforce experience, including experience of securing, analysing, supporting, or delivering Salesforce-based solutions.
• Strong experience working with Salesforce platforms, architecture, and security capabilities.
• Experience applying security controls and best practices across Salesforce implementations and integrations.
• Knowledge of secure software development lifecycle (SDLC) practices, security testing, and vulnerability management.
• Experience conducting threat modelling and security risk assessments.
• Ability to review and contribute to solution architecture and technical design documentation.
• Experience working within Agile and/or Waterfall delivery environments.

It would be great if you had:

• Salesforce certifications such as Salesforce Administrator, Platform App Builder or Platform Developer.
• Certified Ethical Hacker (CEH) or equivalent cyber security certification.
• Experience working within regulated, government, defence, or security-conscious environments.
• Exposure to Salesforce Shield, Identity & Access Management, Event Monitoring, or other Salesforce security tooling.

Employment Type:

Full-time, Permanent.

Location:

London (Hybrid, 2 days per week office based)

Security Clearance Level:

SC eligible.

Internal Recruiter:

Ross.

Salary:

£55,000 – £75,000 per annum (depending on skills and experience)

Benefits:

25 days annual leave with the choice to buy additional days, health cash plan, life assurance, and pension.

Although this role is advertised as full-time, we believe that flexibility at work can promote work/unbalance, increase your motivation, reduce stress and improves performance and productivity. We support different ways of working and can offer a range of flexible working arrangements. So, if you're interested and need to work flexibly, we encourage you to apply and talk to us about what might be possible.

Loved reading about this job and want to know more about us?

With a long history of delivering transformation, we've developed a market‑leading partnership ecosystem to provide business services of the future and shape valuable, positive outcomes for communities. We empower our clients by providing innovative solutions and commercial models that help them meet their business needs, drive operational efficiencies, and deliver impactful value creation. We remain committed to values of excellence, empathy and respect to produce transformative outcomes in business processing – creating value for all.

We embrace difference as a source of creativity, innovation and competitive advantage and are striving to become a more diverse organisation. We welcome applications from people with a diverse variety of backgrounds and identities. We are committed to equality of opportunity for all and do not discriminate on the basis of race, religion, colour, gender, age, disability, sexual orientation or marital status. We have partnered with Vercida, the UK's largest diversity and inclusion focused careers site, where all our vacancies are available in an accessible format.

If you require any adjustments to the recruitment process, to enable you to perform to the best of your ability, please let us know when completing your application. We participate in the Disability Confident scheme and are committed to offering an interview to any candidate with a disability, who meets the minimum criteria for the role. If you believe this could apply to you, please let us know when completing your application.