Cloud Security Engineer – Distributed Systems

PVH (Tommy Hilfiger/Calvin Klein); San Francisco (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Salesforce is seeking a proactive Software Security Engineer to strengthen its security posture across distributed micro-services on Google Cloud Platform. You will build automated tooling, drive threat modeling, and own vulnerability lifecycle across network, cloud, and application layers.

You will partner with DevOps, Product, and security teams to ensure secure SDLC adoption, lead audits, and implement scalable security solutions in a modern CI/CD environment.

Qualifications

• 2+ years in security engineering for MTS, 5+ years for SMTS.
• Strong experience in Go, Java, or Python with OO design and automation.
• Deep experience with GCP and Terraform for cloud security posture (CSPM) and infrastructure.
• Practical experience with Linux OS hardening and modern attack vectors.
• Desire to work cross-functionally with DevOps to embed security into the SDLC.

Responsibilities

• Build and integrate high-performance security tools into CI/CD pipelines (SAST/DAST, SCA, SIEM).
• Develop and secure Terraform/IaC templates to harden cloud infrastructure before production.
• Lead the end-to-end vulnerability lifecycle with a risk-based remediation approach.
• Partner with DevOps and Product teams for threat modeling and architectural reviews.
• Lead audits (SOC2, ISO 27001) with automation for evidence and timely risk closure.
• Troubleshooting security issues in production using distributed tracing and modern monitoring tools.

Skills

Engineering mindset

Security engineering

Go, Java, Python

GCP

Docker

Kubernetes

DevOps collaboration

Tools

Terraform

SAST/DAST

SCA

SIEM

OCI/CSPM

Job description

Salesforce is seeking a proactive Software Security Engineer to strengthen its security posture across distributed micro-services on Google Cloud Platform. You will build automated tooling, drive threat modeling, and own vulnerability lifecycle across network, cloud, and application layers.

You will partner with DevOps, Product, and security teams to ensure secure SDLC adoption, lead audits, and implement scalable security solutions in a modern CI/CD environment.