Software Engineering, MTS, Security and Network Defense

Salesforce; Washington; On-site; USD 120,000 - 180,000; Full time

Job summary

Salesforce is seeking a Software Engineer, MTS on the Email Security & Network Defense (ESND) team. You will build and maintain security-architecture with an automation-first approach, using AI within the development workflow to deploy secure, scalable defenses.

You will collaborate across Security, IT, and CSIRT, contribute to CI/CD pipelines and IaC, and ensure auditable, secure tooling across global environments. A strong AI-first mindset is required.

Qualifications

• 3+ years of experience in a large-scale enterprise security environment.
• Experience building software in Go, Python, Java, or similar.

Responsibilities

• Develop security solutions with AI tools and modern engineering practices.
• Build production-grade software with an automation-first approach and AI integration.
• Contribute to Infrastructure-as-Code automation for secure deployments.
• Develop Configuration-as-Code for policy governance with CI/CD pipelines.
• Support and maintain security policies, SASE architectures, TLS inspection, and secure browser tech.
• Collaborate with Security, IT, and CSIRT to enhance security controls.
• Document security processes and procedures.

Skills

Go

Python

Java

Bash

Terraform

Ansible

CI/CD

AWS

Kubernetes

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

Kubernetes

GitHub Copilot

Terraform

Job description

Job Category

Software Engineering

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

The Experience

The Email Security & Network Defense (ESND) team protects the enterprise by engineering adaptive defense systems across email, network edge, secure browsing, application control, and emerging AI workflows. As a Software Engineering, MTS on this team, you build and maintain the security architecture that keeps Salesforce resilient against evolving threats, using an automation-first philosophy and Agile execution to deploy modern defenses without slowing business momentum. You use Artificial Intelligence (AI) as a core part of your engineering workflow, working alongside AI agents to design, build, and govern secure systems at scale.

What You'll Actually Be Doing

• Develop security solutions leveraging best development practices and modern AI tools and approaches.
• Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
• Contribute to Infrastructure-as-Code automation efforts to provision and manage security systems, ensuring version-controlled and repeatable deployments across global environments.
• Develop and maintain Configuration-as-Code for policy governance for security configurations, using Continuous Integration/Continuous Delivery (CI/CD) pipelines to validate and deploy changes, guaranteeing that security tooling is auditable and peer-reviewed.
• Support and maintain application control policies, tuning, and ongoing management to ensure effective enforcement across the organization.
• Support and maintain secure internet access solutions, including Secure Access Service Edge (SASE) architectures, TLS inspection (TLSi), and secure browser technologies.
• Design and orchestrate systems where AI agents integrate seamlessly into security workflows, driving efficiency and innovation at scale.
• Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably, and critically evaluate code (human- or AI-generated) for correctness, quality, security, and performance.
• Collaborate with cross-functional teams, including Security, Information Technology (IT), and the Computer Security Incident Response Team (CSIRT), to enhance security controls.
• Develop and maintain documentation for security processes and procedures.
• Identify and implement improvements to security systems and processes.

You're Our Person If...

• You have 3+ years of experience working in a large-scale, enterprise security environment.
• Experience building software in one or more languages such as Golang, Python, Java, or similar.
• Experience automating infrastructure or operational workflows using scripting languages (e.g., Bash, Python) and tools like Terraform/Ansible.
• You are proficient with container-based development and CI/CD workflows.
• You understand Amazon Web Services (AWS) cloud infrastructure and services, including containers, Kubernetes, and microservices architecture.
• You bring a demonstrated, genuine AI-first approach to engineering, using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
• You have experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor, etc.) in development workflows, with advanced prompt engineering skills and the ability to write precise, structured prompts that cultivate the system context making AI outputs reliable, secure, and production-ready.
• You have a proven track record of developing and maintaining documentation for security processes and procedures.
• You have a Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

Even Better If...

• You have experience automating workflows or in DevSecOps
• You have experience with application control, secure browser, Socket firewall, Proofpoint, or SASE platforms.
• You have experience securing AI and Large Language Model (LLM) workflows, encompassing the protection of agentic pipelines, model-serving endpoints, and te