Salesforce Security Engineer: Access & Threat Monitoring

Steampunk, Inc.; McLean (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Steampunk, Inc. is seeking a Salesforce Security Engineer to be the primary security contact for the Salesforce environment. You will strengthen security posture, address security questions from internal and external teams, and support ATO activities with artifact collection.

You will design access controls, perform reviews, configure security settings, and build Splunk dashboards to monitor events and aid incident investigations. Collaboration with ISSOs and compliance teams is essential.

Qualifications

• Bachelor's degree is required.
• 8-10 years of experience in Salesforce administration or security engineering.
• Strong knowledge of Salesforce access control models (profiles, permission sets, roles, sharing rules).
• Experience with Salesforce Setup Menu security configuration (session security, login policies, Health Check, Event Monitoring, Shield).
• Proficiency in writing Splunk search queries (SPL) for log analysis, monitoring, and alerting.

Responsibilities

• Design, implement, and audit Salesforce access controls (e.g., profiles, permission sets, roles, sharing rules, field-level security), applying least privilege principles across all user populations.
• Conduct periodic access reviews and recertifications to identify and remediate overly permissive or outdated access.
• Configure and maintain Salesforce security settings via the Setup Menu, including session settings, login IP ranges/restrictions, password policies, MFA enforcement, Health Check, Shield Platform Encryption, and Event Monitoring.
• Build and maintain Splunk queries and dashboards to monitor Salesforce login events, permission changes, and anomalous access patterns, and support incident investigations with log analysis.
• Assess and harden web application security for Salesforce Connected Apps, including CSP, CORS, Trusted URLs, OAuth/Connected App policies, and session security.
• Assist ISSOs in securing applications and collecting security artifacts for assessment and authorization efforts.
• Partner with system owners and compliance teams to ensure security configurations align with NIST 800-53, FedRAMP as applicable.
• Document security configurations, findings, and remediation steps for audit and ATO support.
• Review and provision privileged user access.

Skills

Salesforce security

Access control

SPL queries

Security auditing

Federal/ATO processes

Least privilege

Clearance eligible

Education

Bachelor's degree

Tools

Splunk

Job description

Steampunk, Inc. is seeking a Salesforce Security Engineer to be the primary security contact for the Salesforce environment. You will strengthen security posture, address security questions from internal and external teams, and support ATO activities with artifact collection.

You will design access controls, perform reviews, configure security settings, and build Splunk dashboards to monitor events and aid incident investigations. Collaboration with ISSOs and compliance teams is essential.