Senior Salesforce Security Engineer — Access Control & ATO

UNAVAILABLE; McLean (VA); Sur place; USD 120 000 - 180 000; Plein temps

Résumé du poste

UNAVAILABLE in McLean, VA is seeking a Salesforce Security Engineer to serve as the primary security contact for the Salesforce environment. You will strengthen the security posture across the Salesforce environment, address questions from internal and external teams, assist ISSOs in securing applications, and build Splunk queries to monitor login events and anomalous access.

Responsibilities include enforcing least privilege, conducting access reviews, and coordinating with system owners to

Qualifications

• Ability to obtain and maintain a U.S. Government security clearance.
• Bachelor's degree.
• 8-10 years of experience in Salesforce administration or security engineering.
• Strong knowledge of Salesforce access control models and least privilege implementation.
• Experience with Salesforce Setup Menu security configuration (session security, Health Check, Event Monitoring, Shield).
• Proficient in writing Splunk search queries (SPL).
• Working knowledge of web application security concepts (CSP, CORS, OAuth).

Responsabilités

• Design, implement, and audit Salesforce access controls (e.g., profiles, permission sets, roles, sharing rules, field-level security), applying least privilege principles across all user populations.
• Conduct periodic access reviews and recertifications to identify and remediate overly permissive or outdated access.
• Configure and maintain Salesforce security settings via the Setup Menu, including session settings, login IP ranges/restrictions, password policies, MFA enforcement, Health Check, Shield Platform Encryption, and Event Monitoring.
• Build and maintain Splunk queries and dashboards to monitor Salesforce login events, permission changes, and anomalous access patterns, and support incident investigations with log analysis.
• Assess and harden web application security for Salesforce Connected Apps, including CSP, CORS, Trusted URLs, OAuth/Connected App policies, session security.
• Assist ISSOs in securing their applications and collecting security artifacts in support of their assessment and authorization efforts.
• Partner with system owners and compliance teams to ensure security configurations align with federal security requirements (e.g., NIST 800-53, FedRAMP, as applicable).
• Document security configurations, findings, and remediation steps for audit and ATO support.
• Review and provision privileged user access.

Connaissances

Security engineering

Salesforce security knowledge

Least privilege

Access reviews

Policy alignment

Formation

Bachelor's degree

Outils

Splunk SPL

Salesforce Setup Security

Description du poste

UNAVAILABLE in McLean, VA is seeking a Salesforce Security Engineer to serve as the primary security contact for the Salesforce environment. You will strengthen the security posture across the Salesforce environment, address questions from internal and external teams, assist ISSOs in securing applications, and build Splunk queries to monitor login events and anomalous access.

Responsibilities include enforcing least privilege, conducting access reviews, and coordinating with system owners to