Senior Platform Trust & Safety Engineer (Splunk Detection)

salesforce.com, inc.; Bellevue (WA); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce is seeking a Platform Trust and Safety Engineer to join the Platform Defense and Safety team in Bellevue, WA. You will detect, investigate, and respond to abuse, fraud, and account takeover, building rules and tooling to keep our products secure.

You’ll develop detection logic in Splunk SPL, contribute to anti-abuse playbooks, and collaborate with Legal and Privacy teams on regulatory reporting such as the DSA.

Qualifications

• Extensive information security experience focusing on platform abuse, threat intel, incident response, or threat detection.
• End-to-end security investigations: triage, evidence collection, risk assessment, containment, escalation, closure.
• Specialization in log analysis, forensics, or data mining.
• Experience authoring detection rules using SPL or YARA; comfortable with command line.

Responsibilities

• Review and respond to external and internal abuse reports across Core CRM and Marketing Cloud.
• Build and tune detection rules in Splunk; maintain automated response playbooks.
• Collaborate with Office of Ethical Usage and Legal on regulatory reporting such as the EU DSA.
• Define anti-abuse tooling requirements and evaluate third-party vendors to close gaps.

Skills

Threat intelligence

Incident response

Threat detection

Log analysis

Forensics

Data mining

SPL / YARA

Tools

Splunk

YARA

SOQL

Job description

Salesforce is seeking a Platform Trust and Safety Engineer to join the Platform Defense and Safety team in Bellevue, WA. You will detect, investigate, and respond to abuse, fraud, and account takeover, building rules and tooling to keep our products secure.

You’ll develop detection logic in Splunk SPL, contribute to anti-abuse playbooks, and collaborate with Legal and Privacy teams on regulatory reporting such as the DSA.