Senior Platform Defense & Safety Engineer

Salesforce; Bellevue (KY); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce is seeking a Platform Trust and Safety Engineer to join the Platform Defense and Safety team. You will detect and stop abuse, fraud, and account takeover across Core CRM and Marketing Cloud, using your expertise in threat intelligence and incident response.

You’ll build detection rules in Splunk, collaborate with Legal and Privacy on regulatory reporting such as the EU Digital Services Act, and help develop end‑to‑end investigations and playbooks.

Qualifications

• Extensive experience in information security roles involving platform abuse, threat intelligence, incident response, or threat detection.
• Experience managing security or abuse investigations end to end: triage, evidence collection, risk assessment, containment, escalation, and closure
• Specialization in at least one: log analysis, file-level forensics, or data mining
• Experience authoring detection rules using languages such as YARA or Splunk SPL, and comfort working from a command line

Responsibilities

• Review, triage, and respond to abuse reports across Core CRM and Marketing Cloud, with an eye toward expanding into new products
• Build and tune detection and response rules in Splunk, and author and maintain automated response playbooks
• Partner with our Office of Ethical Usage and Legal teams — including on regulatory reporting such as the EU Digital Services Act (DSA) — to keep our platforms free of malicious content
• Identify and document anti-abuse tooling requirements for engineering teams, and evaluate third-party vendor tools to close detection gaps

Skills

Platform abuse knowledge

Threat intelligence

Incident response

Threat detection

Tools

Splunk

YARA

Job description

Salesforce is seeking a Platform Trust and Safety Engineer to join the Platform Defense and Safety team. You will detect and stop abuse, fraud, and account takeover across Core CRM and Marketing Cloud, using your expertise in threat intelligence and incident response.

You’ll build detection rules in Splunk, collaborate with Legal and Privacy on regulatory reporting such as the EU Digital Services Act, and help develop end‑to‑end investigations and playbooks.