Senior Software Security Engineer — GCP, Terraform & Automation

Salesforce, Inc.; Seattle (WA); Sur place; USD 149 000 - 314 000; Plein temps

Résumé du poste

Salesforce is seeking a Software Security Engineer to strengthen our security posture across cloud-native microservices on GCP. You will build automated security tools, improve IaC templates with Terraform, and lead vulnerability lifecycle across network, cloud, and application layers.

You will collaborate with DevOps and Product teams, drive threat modeling and architectural reviews, and support audits (SOC2, ISO 27001).

Qualifications

• 5+ years for SMTS, 7+ years for LMTS; 9+ years for PMTS in Security Engineering with a focus on building tools.
• Strong experience in Go, Java, or Python with a solid grasp of Object-Oriented Programming and automation.
• Deep experience with GCP (or similar) and Terraform for managing cloud security posture (CSPM) and infrastructure.
• Practical experience with network protocols, OS hardening (Linux), and modern attack vectors.
• Collaborate with DevOps to embed security into the SDLC.

Responsabilités

• Security Engineering & Automation: Build and integrate high-performance security tools and custom scripts into our CI/CD pipelines (SAST/DAST, SCA, SIEM) to automate manual toil.
• Infrastructure as Code (IaC): Develop and secure Terraform/IaC templates to ensure our cloud infrastructure is hardened by design before it ever reaches production.
• Vulnerability Leadership: Lead the end-to-end vulnerability lifecycle, using a risk-based approach to prioritize remediation across network, cloud, and application layers.
• Architecture & Threat Modeling: Partner with DevOps and Product teams to conduct threat modeling and architectural reviews, ensuring new features are resilient and scalable.
• Compliance & Governance: Act as the technical lead for audits (SOC2, ISO 27001), leveraging automation to provide evidence of consistent monitoring and timely closure of risks.
• Production Resilience: Troubleshooting and resolving complex security issues in production using distributed tracing and modern monitoring tools.

Connaissances

Go

Java

Python

CI/CD

OO Programming

Security Tools

GCP

Terraform

Docker

Kubernetes

Outils

Terraform

GCP

Docker

Kubernetes

Description du poste

Salesforce is seeking a Software Security Engineer to strengthen our security posture across cloud-native microservices on GCP. You will build automated security tools, improve IaC templates with Terraform, and lead vulnerability lifecycle across network, cloud, and application layers.

You will collaborate with DevOps and Product teams, drive threat modeling and architectural reviews, and support audits (SOC2, ISO 27001).