Senior Software Security Engineer - Cloud & Automation

Salesforce, Inc.; Richmond (VA); On-site; USD 149,000 - 314,000; Full time

Job summary

Salesforce, Inc. is seeking a Software Security Engineer to join the GCP team. You will strengthen security across distributed micro-services on Google Cloud Platform, building automated tools that scale with the engineering org.

You will drive vulnerability lifecycle management, design threat models, and ensure compliance with SOC2 and ISO 27001, while integrating security into CI/CD and IaC workflows.

Qualifications

• 5+ years for SMTS, 7+ years for LMTS; 9+ years for PMTS in Security Engineering.
• Strong experience with Go, Java, or Python and solid OOP skills.
• Deep experience with GCP and Terraform for managing cloud security posture (CSPM).
• Hands-on knowledge of network protocols, OS hardening (Linux), and modern attack vectors.
• Proven ability to collaborate with DevOps to embed security into the SDLC.

Responsibilities

• Security Engineering & Automation: Build and integrate high-performance security tools into CI/CD pipelines (SAST/DAST, SCA, SIEM).
• Infrastructure as Code (IaC): Develop and secure Terraform/IaC templates to harden cloud infrastructure before production.
• Vulnerability Leadership: Lead end-to-end vulnerability lifecycle with a risk-based remediation approach.
• Architecture & Threat Modeling: Partner with DevOps and Product teams for threat modeling and reviews.
• Compliance & Governance: Lead audits (SOC2, ISO 27001) with automated evidence of monitoring and risk closure.
• Production Resilience: Troubleshoot security issues in production using distributed tracing and modern monitoring tools.

Skills

Go

Java

Python

Object-Oriented Programming

Automation

Tools

GCP

Terraform

Docker

Kubernetes

SAST/DAST

SCA

SIEM

Job description

Salesforce, Inc. is seeking a Software Security Engineer to join the GCP team. You will strengthen security across distributed micro-services on Google Cloud Platform, building automated tools that scale with the engineering org.

You will drive vulnerability lifecycle management, design threat models, and ensure compliance with SOC2 and ISO 27001, while integrating security into CI/CD and IaC workflows.