Platform Trust & Safety Engineer – Threat & Abuse Detection

Salesforce, Inc.; Seattle (WA); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce, Inc. is seeking a Platform Trust and Safety Engineer in Seattle, WA to identify and stop abuse, fraud, and account takeover across Core CRM and Marketing Cloud.

The role focuses on detecting malicious activity, building robust detection rules, and collaborating with Legal and Ethics teams to ensure regulatory compliance. You will triage abuse reports, develop playbooks, and engage in threat modeling for platform protection, while leveraging Splunk SPL and YARA in a cloud SaaS

Qualifications

• Extensive experience in information security roles involving platform abuse, threat intelligence, incident response, or threat detection.
• Experience managing security or abuse investigations end-to-end: triage, evidence collection, risk assessment, containment, escalation, and closure.
• Specialization in at least one: log analysis, file-level forensics, or data mining.
• Experience authoring detection rules using languages such as YARA or Splunk SPL, and comfort working from a command line.

Responsibilities

• Review, triage, and respond to external and internal abuse reports across Core CRM and Marketing Cloud, with an eye toward expanding into new products.
• Build and tune detection and response rules in Splunk, and author and maintain automated response playbooks.
• Partner with Office of Ethical Usage and Legal teams on regulatory reporting such as the EU Digital Services Act (DSA).
• Identify and document anti-abuse tooling requirements for engineering teams, and evaluate third-party vendor tools to close detection gaps.

Skills

Information security

Threat intelligence

Incident response

Threat detection

Log analysis

File-level forensics

Data mining

YARA

Splunk SPL

Command line

Education

Related technical degree

Tools

Splunk

YARA

SPL

Git/GitHub

Job description

Salesforce, Inc. is seeking a Platform Trust and Safety Engineer in Seattle, WA to identify and stop abuse, fraud, and account takeover across Core CRM and Marketing Cloud.

The role focuses on detecting malicious activity, building robust detection rules, and collaborating with Legal and Ethics teams to ensure regulatory compliance. You will triage abuse reports, develop playbooks, and engage in threat modeling for platform protection, while leveraging Splunk SPL and YARA in a cloud SaaS