Salesforce Security Engineer: Access Control & Incident Analytics

Steampunk; Bloomington (IL); On-site; USD 110,000 - 160,000; Full time

Job summary

Steampunk seeks a Salesforce Security Engineer to serve as the primary security contact for the Salesforce environment. You will strengthen the security posture, address issues, and support ATO activities through artifact collection and monitoring.

Responsibilities include implementing access controls, conducting reviews, maintaining security configurations, and building Splunk dashboards while collaborating with ISSOs and compliance to meet federal standards.

Qualifications

• Understanding of Salesforce access control models and least privilege implementation.
• Experience writing Splunk search queries for log analysis and alerting.
• Familiarity with web application security concepts (CSP, CORS, OAuth, trusted domains).
• Ability to obtain and maintain a U.S. Government security clearance.

Responsibilities

• Design, implement, and audit Salesforce access controls (profiles, permission sets, roles, sharing rules, field-level security) with least privilege.
• Conduct periodic access reviews and recertifications to remove overly permissive access.
• Configure Salesforce security settings via Setup Menu (session security, login policies, Health Check, Event Monitoring, MFA).
• Build and maintain Splunk queries and dashboards to monitor login events and access patterns, support incident investigations.
• Assess and harden web application security for Connected Apps (CORS, CSP, Trusted URLs, OAuth policies, session security).
• Assist ISSOs in securing applications and collecting security artifacts for ATO efforts.
• Partner with system owners and compliance teams to align configurations with federal requirements (NIST 800-53, FedRAMP).
• Document security configurations, findings, and remediation steps for audit/ATO.
• Review and provision privileged user access.

Skills

Salesforce access control models

Least privilege implementation

Splunk SPL

Web application security concepts

Security clearance

Education

Bachelor’s degree

Tools

Salesforce

Splunk

Salesforce Setup

Job description

Steampunk seeks a Salesforce Security Engineer to serve as the primary security contact for the Salesforce environment. You will strengthen the security posture, address issues, and support ATO activities through artifact collection and monitoring.

Responsibilities include implementing access controls, conducting reviews, maintaining security configurations, and building Splunk dashboards while collaborating with ISSOs and compliance to meet federal standards.