Senior Platform Trust & Safety Engineer — Threat Detection & Response

Salesforce, Inc.; Dallas (TX); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce, Inc. is seeking a Platform Trust and Safety Engineer to identify and stop abuse, fraud, and account takeovers across Core CRM and Marketing Cloud. You will build detection rules in Splunk, create automated playbooks, and partner with the Office of Ethical Usage and Legal teams on regulatory reporting.

The role requires a related technical degree and comfort with command line work. You may participate in on-call rotations and contribute to platform abuse threat modeling in a

Qualifications

• Experience in platform abuse, threat intelligence, incident response, or threat detection.
• Experience managing security investigations end to end: triage, evidence collection, risk assessment, containment, escalation, closure.
• Specialization in log analysis, file-forensics, or data mining.
• Experience authoring detection rules with languages such as YARA or Splunk SPL.

Responsibilities

• Review, triage, and respond to abuse reports across Core CRM and Marketing Cloud.
• Build and tune detection and response rules in Splunk; maintain automated response playbooks.
• Collaborate with Office of Ethical Usage and Legal teams on regulatory reporting (e.g., EU DSA).
• Identify anti-abuse tooling requirements and evaluate third-party tools to close detection gaps.

Skills

Abuse detection

Threat intelligence

Incident response

Splunk SPL

YARA

Data mining

Education

Related technical degree

Tools

Splunk

Job description

Salesforce, Inc. is seeking a Platform Trust and Safety Engineer to identify and stop abuse, fraud, and account takeovers across Core CRM and Marketing Cloud. You will build detection rules in Splunk, create automated playbooks, and partner with the Office of Ethical Usage and Legal teams on regulatory reporting.

The role requires a related technical degree and comfort with command line work. You may participate in on-call rotations and contribute to platform abuse threat modeling in a