Senior Staff Software Engineer, Security - Slack

salesforce; San Francisco (CA); On-site; USD 230,000 - 352,000; Full time

Job summary

An established industry player is seeking a Senior Staff-level blue team software engineer to enhance their threat detection program. This dynamic role focuses on threat detection, logging, and remediation within a supportive and innovative environment. The ideal candidate will collaborate with a talented team of engineers, working with technologies like Go, Python, and Elasticsearch. You'll play a key role in developing high-quality solutions that protect infrastructure while fostering a culture of curiosity and collaboration. If you're passionate about security and eager to make an impact, this opportunity is perfect for you.

Qualifications

• Passion for identifying IOCs and proposing new detection features.
• Experience in Data Science or ML with anomaly detection models.

Responsibilities

• Identify and develop features to enhance security tools.
• Detect threats and improve Slack's security posture.
• Respond to incidents and investigate potential threats.

Skills

Curiosity and creativity

Problem-solving

Collaboration

Understanding of MFA

Knowledge of Zero Trust

Tools

AWS

Elasticsearch

Kibana

Google Chronicle

Job description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to avoid duplicating efforts.

Job Category

Software Engineering

Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI, Data, and CRM. Leading with our core values, we help companies across industries blaze new trails and connect with customers in innovative ways. We empower you to be a Trailblazer—driving your performance, career growth, and making a positive impact on the world. If you believe in business as a platform for change and in companies doing well and doing good, you’ve come to the right place.

Our security team supports Slack’s mission: making people’s working lives more secure. We’re committed to protecting our infrastructure, operations, and customer data through a systemic, low-friction, high-impact security approach.

Slack Security Engineering is hiring a curious Senior Staff-level blue team software engineer to enhance our threat detection program and collaborate on development efforts. A strong interest in development, operations, curiosity, and a desire to learn are essential.

You will work directly on the Slack Security Engineering team focusing on threat detection, logging, and remediation. Our goal is to maintain comprehensive records of actions taken to address unknowns.

Experience in Data Science or ML is desirable, starting with simple anomaly detection models and evolving towards using LLMs for alerting and self-learning models.

The ideal candidate is passionate about identifying IOCs, proposing new detection features, and has experience with APT tradecraft and threat intelligence. Collaboration with multidisciplinary engineers skilled in Go, Python, and Elasticsearch is valued. We are cautious AI adopters, exploring tools like Cursor to accelerate our efforts.

This role supports our US-based, distributed SecOps team, working closely with teams in Melbourne and Auckland. We value regular communication, collaboration via Slack, and participation in on-call rotations. We also encourage broader engineering engagement at Slack.

Slack fosters a positive, diverse, and supportive culture—seeking curious, inventive, and continuously improving individuals. We prioritize intelligence, humility, hard work, and collaboration.

If this sounds like a good fit, why not say “hello?”

What you will be doing

• Identify and develop features and roadmaps to enhance tools protecting Slack’s infrastructure and improving security, productivity, and user experience.
• Detect threats and contribute to Slack’s security posture.
• Develop eBPF tooling and author detections.
• Scale and operate infrastructure handling millions of events per second.
• Respond to incidents in our on-call rotation and investigate potential threats.

What you should have

• Curiosity and creativity—desire to understand why incidents happen, not just that they happen.
• A desire to empower colleagues, with pride in creating maintainable, high-quality solutions.
• Motivation to solve problems thoroughly rather than patching quickly.
• Eagerness to collaborate across teams and foster an inclusive environment.
• Broad exposure to security disciplines and understanding of core concepts like MFA, Zero Trust, and secret management.

Bonus Points

• Experience with AWS or other cloud providers.
• Familiarity with Elasticsearch/Kibana and metrics analysis.
• Experience with Google Chronicle or other SIEM tools.

Accommodations

If you need assistance due to a disability, please submit a request via this Accommodations Request Form.

Posting Statement

Salesforce is an equal opportunity employer committed to diversity and inclusion. We evaluate candidates based on merit, competence, and qualifications, regardless of protected characteristics. Our policies ensure fair treatment in all employment decisions. For more information, visit Know your rights: workplace discrimination is illegal.

We consider qualified applicants with arrest and conviction records, in accordance with local laws. Salary ranges vary by location: $230,700 to $351,800 for US-based roles, and $251,900 to $384,100 for California roles. Compensation depends on various factors, including experience, and may include incentives, equity, and benefits. Details are available at https://www.salesforcebenefits.com.