Salesforce Security Engineer

Oliver James Associates Ltd.; United Kingdom; Hybrid; GBP 85,000; Full time

Job summary

A leading company is seeking a Salesforce Security Engineer to enhance the security posture of their Salesforce platform. You will be integral in implementing secure code practices and security testing within the CI/CD pipeline, while collaborating with engineering teams to ensure security is embedded in the development lifecycle. Ideal candidates will have strong engineering fundamentals combined with a commitment to improving security maturity.

Qualifications

• Hands-on experience with Salesforce development (particularly APEX).
• Strong grasp of secure coding practices and running DAST/SAST.
• Experience integrating security into CI/CD pipelines.

Responsibilities

• Lead security engineering for the Salesforce platform.
• Conduct threat modelling for Salesforce-based estates.
• Improve pipeline security and conduct security tests.

Skills

Salesforce development

Secure coding practices

Threat modelling

Pipeline security

DSOMM

OWASP principles

Job description

Salesforce Security Engineer

Salary : £85,000

Locations: Leeds, Manchester, Redhill, Tunbridge Wells, Bournemouth, or Bristol (Hybrid/Flexible)

We're looking for a Salesforce Security Engineer who brings strong engineering fundamentals and hands-on experience to the intersection of Salesforce development and security engineering.

You'll play a critical role in enhancing the security posture of our Salesforce platform-contributing directly to secure code practices, threat modelling, and security testing across our CI/CD pipeline.

This role is ideal for someone with engineering roots who has evolved into the security space and is passionate about improving security maturity in modern DevSecOps environments.

What You'll Do

• Lead and contribute to the security engineering of our Salesforce platform especially in the context of APEX code, API design, and secure development lifecycle.
• Apply the DSOMM (DevSecOps Maturity Model) and OWASP security principles to assess and uplift Salesforce security maturity.
• Own and improve pipeline security including static code analysis (SAST), dynamic application security testing (DAST), dependency checks, and secure deployment patterns.
• Conduct threat modelling for Salesforce-based estates, identifying and mitigating risks early in the development lifecycle.
• Perform and refine security tests across APIs and applications within the Salesforce environment.
• Work collaboratively with platform engineers, developers, and the broader infosec team to embed security by design.
• Advise on approaches to code signing, policy enforcement, and change validation in a distributed Salesforce landscape.
• Explore and address the unique challenges of securing a Salesforce-first architecture, integrated across the broader estate.

What You Bring

• Hands-on experience with Salesforce development (particularly APEX) and a deep understanding of how engineering and security intersect.
• Strong grasp of secure coding practices and experience running DAST/SAST on Salesforce environments.
• Exposure to or working knowledge of DSOMM, OWASP, and threat modelling methodologies.
• Experience integrating security into CI/CD pipelines, especially in complex enterprise platforms.
• Ability to approach platform security from an engineering-first mindset, not just compliance.
• Confident communicator who can translate technical security needs into engineering requirements.

If you're ready to play a key role in a transformative digital journey and have the expertise to lead high-performing engineering teams, we'd love to hear from you! Click "Apply" Or Email [e-mail]