Senior Platform Trust and Safety Engineer

Salesforce; Washington; On-site; USD 130,000 - 170,000; Full time

Job summary

Salesforce is seeking a Platform Trust and Safety Engineer to help protect Core CRM and Marketing Cloud from abuse, fraud, and account takeover. You will review abuse reports, build detection rules in Splunk, and collaborate with Legal and the Office of Ethical Usage to ensure regulatory compliance.

Ideal candidates have extensive information security experience, expertise in threat intelligence, incident response, and knowledge of data mining or log analysis.

Qualifications

• Extensive experience in information security roles involving platform abuse, threat intelligence, incident response, or threat detection.
• Experience managing security or abuse investigations end to end: triage, evidence collection, risk assessment, containment, escalation, and closure.
• Specialization in at least one of: log analysis, file-level forensics, or data mining.

Responsibilities

• Review, triage, and respond to external and internal abuse reports across Core CRM and Marketing Cloud, with an eye toward expanding into new products.
• Build and tune detection and response rules in Splunk, and author and maintain automated response playbooks.
• Partner with our Office of Ethical Usage and Legal teams - including on regulatory reporting such as the EU Digital Services Act (DSA) - to keep our platforms free of malicious content.
• Identify and document anti-abuse tooling requirements for engineering teams, and evaluate third-party vendor tools to close detection gaps.

Skills

Information security

Threat intelligence

Incident response

Threat detection

Playbooks & SOPs

On-call rotation

Collaboration

Tools

Splunk

Splunk SPL

YARA

Git/GitHub

Job description

Job Category

Enterprise Technology & Infrastructure

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Salesforce's platforms - including Core CRM and Marketing Cloud - let companies build, deliver, monitor, and scale their engagement with customers globally. Not everyone uses that access responsibly. We're looking for a Platform Trust and Safety Engineer who is dedicated to identifying and stopping abusers who commit fraud, phishing, and account takeover, or who otherwise use our services to make the internet a hostile space.

The Experience

• Extensive experience in information security roles involving platform abuse, threat intelligence, incident response, or threat detection
• Experience managing security or abuse investigations end to end: triage, evidence collection, risk assessment, containment, escalation, and closure
• Specialization in at least one of: log analysis, file-level forensics, or data mining
• Experience authoring detection rules using languages such as YARA or Splunk SPL, and comfort working from a command line

What You'll Actually Be Doing

• Review, triage, and respond to external and internal abuse reports across Core CRM and Marketing Cloud, with an eye toward expanding into new products
• Build and tune detection and response rules in Splunk, and author and maintain automated response playbooks
• Partner with our Office of Ethical Usage and Legal teams - including on regulatory reporting such as the EU Digital Services Act (DSA) - to keep our platforms free of malicious content
• Identify and document anti-abuse tooling requirements for engineering teams, and evaluate third-party vendor tools to close detection gaps

You're Our Person If...

• You track emerging trends in digital crime, merchant fraud, and abuse of AI/agentic capabilities
• You write and maintain clear playbooks, SOPs, and postmortems that drive continuous improvement
• You collaborate easily across teams - including Product Security Advisors, engineering, and product teams - and can contribute to platform abuse threat modeling
• You're comfortable participating in an on-call rotation

Even Better If...

• You can quickly and effectively understand someone else's code
• You have extensive experience using Splunk for detection engineering and SPL rule authoring
• You've worked with threat intelligence tools or teams
• You have experience with workflow orchestration or automation platforms (e.g., Temporal)
• You've worked in a customer-facing role (Support, Sales Engineering, etc.)
• You're familiar with evidence handling, privacy, data retention, and regulatory considerations relevant to security investigations
• You understand cloud/SaaS security concepts, multi-tenant platforms, identity systems, and application telemetry
• You have experience analyzing large, complex data sets, and familiarity with Git/GitHub and the Salesforce platform (Cases, SOQL)

Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates' resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more