Software Security Engineer — Cloud & IaC Automation

salesforce.com, inc.; San Francisco (CA); On-site; USD 117,200 - 223,900; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Employee stock purchase plan

Job summary

Salesforce is seeking a proactive Software Security Engineer to fortify our distributed micro-services on GCP. You’ll own security tooling, automate defenses, and integrate security into the SDLC, from CI/CD to production monitoring.

You’ll partner with DevOps and product teams, driving threat modeling, IaC security, and audits (SOC2, ISO 27001) to reduce risk. Join a team building agented AI-enabled Salesforce applications on Google Cloud, leveraging Terraform, SAST/DAST, and modern tracing to

Qualifications

• Engineering mindset with hands-on security tooling experience.
• Proficient in Go/Java/Python and automation.
• Strong cloud security posture experience (GCP, Terraform).
• Knowledge of networks, Linux hardening, and threat vectors.
• Ability to work cross-functionally with DevOps and security teams.

Responsibilities

• Build and integrate high-performance security tools into CI/CD pipelines (SAST/DAST, SCA, SIEM).
• Develop and secure Terraform/IaC templates for hardened cloud infra.
• Lead vulnerability lifecycle prioritization across network, cloud, and app layers.
• Conduct threat modeling and architectural reviews with DevOps and product teams.
• Coordinate audits (SOC2, ISO 27001) and automate evidence collection.
• Troubleshoot production security issues using modern monitoring tools.

Skills

Engineering Mindset

Coding Proficiency

Cloud & Infra

Security Domain

Collaborative Spirit

Tools

Docker

Kubernetes

Terraform

GCP

Job description

Salesforce is seeking a proactive Software Security Engineer to fortify our distributed micro-services on GCP. You’ll own security tooling, automate defenses, and integrate security into the SDLC, from CI/CD to production monitoring.

You’ll partner with DevOps and product teams, driving threat modeling, IaC security, and audits (SOC2, ISO 27001) to reduce risk. Join a team building agented AI-enabled Salesforce applications on Google Cloud, leveraging Terraform, SAST/DAST, and modern tracing to