Software Security Engineer - GCP, IaC & Automation

Salesforce, Inc.; Virginia; On-site; USD 149,000 - 314,000; Full time

Job summary

Salesforce, Inc. is seeking a Software Security Engineer to join our GCP team and strengthen security across distributed micro-services deployed on Google Cloud Platform.

You will design and implement automated security solutions, improve vulnerability management, and partner with DevOps to embed security into the SDLC. You should have hands-on experience with security tooling, IaC, and cloud security posture management, with a focus on automation, scalability, and production resilience.

Qualifications

• 5+ years for SMTS / 7+ years for LMTS in Security Engineering.
• Proficient in Go, Java or Python and automation.
• Deep experience with GCP and Terraform for CSPM.
• Security knowledge of networks, OS hardening and modern threats.
• Collaborates with DevOps to integrate security into the SDLC.

Responsibilities

• Build and integrate high‑performance security tools into CI/CD pipelines.
• Develop and secure Terraform/IaC templates for hardened cloud infra.
• Lead end‑to‑end vulnerability lifecycle with a risk-based approach.
• Conduct threat modeling and architectural reviews with DevOps and product teams.
• Lead audits (SOC2, ISO 27001) with automated evidence of monitoring.
• Troubleshoot production security issues using distributed tracing and monitoring.

Skills

Go

Java

Python

Tools

Terraform

GCP

Docker

Kubernetes

Job description

Salesforce, Inc. is seeking a Software Security Engineer to join our GCP team and strengthen security across distributed micro-services deployed on Google Cloud Platform.

You will design and implement automated security solutions, improve vulnerability management, and partner with DevOps to embed security into the SDLC. You should have hands-on experience with security tooling, IaC, and cloud security posture management, with a focus on automation, scalability, and production resilience.