Cloud Security Engineer - GCP, IaC & Automation

Salesforce, Inc.; Boston (MA); On-site; USD 149,000 - 314,000; Full time

Job summary

Salesforce, Inc. is seeking a Software Security Engineer to strengthen our distributed cloud security posture on Google Cloud Platform. You will build automated security tooling, integrate them into CI/CD, and partner with DevOps to embed security into the SDLC.

Candidates should have 5+ years in security engineering with Go/Java/Python, Terraform, and experience in threat modeling, audits (SOC2, ISO 27001), and production resilience.

Qualifications

• 5+ years for SMTS, 7+ years for LMTS, 9+ years for PMTS in Security Engineering.
• Strong experience in Go, Java, or Python with automation.
• Deep experience with GCP (or similar) and Terraform for managing cloud security posture (CSPM) and infrastructure.
• Security domain knowledge: networks, OS hardening (Linux), and modern attack vectors.

Responsibilities

• Security engineering & automation: build security tools into CI/CD pipelines (SAST/DAST, SCA, SIEM).
• IaC: develop and secure Terraform/IaC templates to harden cloud infrastructure.
• Vulnerability leadership: oversee remediation across network, cloud, and application layers.
• Architecture & threat modeling: collaborate with DevOps and Product teams on threat modeling and architectural reviews.
• Compliance & governance: lead audits (SOC2, ISO 27001) with automation for evidence collection.
• Production resilience: troubleshoot security issues in production using distributed tracing and monitoring.

Skills

Go

Java

Python

Security engineering

CI/CD pipelines

Terraform

GCP

Vulnerability management

Threat modeling

Automation

Tools

Docker

Kubernetes

SIEM

Terraform

Automated security tools

Job description

Salesforce, Inc. is seeking a Software Security Engineer to strengthen our distributed cloud security posture on Google Cloud Platform. You will build automated security tooling, integrate them into CI/CD, and partner with DevOps to embed security into the SDLC.

Candidates should have 5+ years in security engineering with Go/Java/Python, Terraform, and experience in threat modeling, audits (SOC2, ISO 27001), and production resilience.