Senior Software Security Engineer (SMTS/LMTS/PMTS)

Salesforce, Inc.; Montana; On-site; USD 149,000 - 345,000; Full time

Job summary

Salesforce, Inc. is seeking a Software Security Engineer to strengthen our GCP-based security posture. You will build automated security tools, secure Terraform templates, and lead vulnerability management across distributed microservices.

Collaboration with DevOps and product teams is essential to ensure scalable, resilient security across the stack. The role emphasizes threat modeling, compliance leadership (SOC2, ISO 27001), and production security tooling within a modern CI/CD environment.

Qualifications

• 5+ years for SMTS, 7+ years for LMTS; 9+ years for PMTS in Security Engineering with a focus on building tools.
• Proficient in Go, Java, or Python with a strong automation mindset.
• Deep experience with GCP (or similar) and Terraform for cloud security posture and IaC.

Responsibilities

• Security Engineering & Automation: Build and integrate high-performance security tools into CI/CD pipelines (SAST/DAST, SCA, SIEM).
• Infrastructure as Code (IaC): Develop and secure Terraform/IaC templates to harden cloud infra before production.
• Vulnerability Leadership: Lead end-to-end vuln lifecycle with risk-based remediation across network, cloud, and app layers.
• Architecture & Threat Modeling: Partner with DevOps and Product teams for threat modeling and reviews.
• Compliance & Governance: Lead audits (SOC2, ISO 27001) with automated evidence of monitoring and risk closure.
• Production Resilience: Troubleshoot and resolve advanced security issues in production using modern monitoring tools.

Skills

Security engineering

Automation

Cloud security

DevOps collaboration

Threat modeling

Tools

Go

Java

Python

Terraform

Kubernetes

CI/CD

Job description

Salesforce, Inc. is seeking a Software Security Engineer to strengthen our GCP-based security posture. You will build automated security tools, secure Terraform templates, and lead vulnerability management across distributed microservices.

Collaboration with DevOps and product teams is essential to ensure scalable, resilient security across the stack. The role emphasizes threat modeling, compliance leadership (SOC2, ISO 27001), and production security tooling within a modern CI/CD environment.