Software Security Engineer

Salesforce

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: San Francisco, CAMontanaWashingtonVirginia
Salary: $148,500–$313,700 / yr
Employment: Full-time
Posted: 8 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $184k

This role $231k

$128k $334k

below market most similar roles pay here above market

This role pays more than 82% of similar roles. Most pay $151,475–$217,500 — the blue band above. At the midpoint, this role pays about $231k versus about $184k for comparable roles.

Based on 240 similar postings.

Employer

About Salesforce

Salesforce is the world''s leading customer relationship management (CRM) platform, offering cloud-based software for sales, service, marketing, analytics, and application development. Industry: Enterprise Software & Cloud Computing

Salesforce currently has 221 open roles on FindRole.

Listed pay typically runs $148,500–$260,100 across 125 roles with salary data.

Most-posted roles

View all roles at Salesforce

At a glance

TL;DR · Software Security Engineer

Role Posting Log in to save

JOB TITLE: Software Security Engineer - SMTS/LMTS/PMTS The Software Security Engineer joins the GCP team to enhance the security posture of distributed micro-services architecture. This role focuses on engineering automated, high-performance tools to prevent vulnerabilities rather than just identifying them. Key responsibilities include building security tools and custom scripts for CI/CD pipelines, developing hardened Terraform Infrastructure as Code templates, and leading the end-to-end vulnerability lifecycle. The engineer will conduct threat modeling, perform architectural reviews, and manage audits for SOC2 and ISO 27001 compliance. Required technical skills include proficiency in Go, Java, or Python, along with experience in GCP, Terraform, and Linux OS hardening. The role addresses the technical challenge of securing scalable distributed systems and integrating Salesforce applications on the Google Cloud Platform through automated security engineering.

Skills

GCP Terraform Go Java Python Kubernetes Docker CI/CD SAST DAST SCA SIEM Linux SOC2 ISO 27001 Distributed Systems micro-services Threat Modeling CSPM

What you'll do

Build and integrate high-performance security tools and custom scripts into CI/CD pipelines.
Develop and secure Terraform and Infrastructure as Code templates for cloud hardening.
Lead the end-to-end vulnerability lifecycle using a risk-based approach to prioritize remediation.
Conduct threat modeling and architectural reviews to ensure new features are resilient and scalable.
Act as the technical lead for audits by automating evidence collection for SOC2 and ISO 27001.
Troubleshoot and resolve complex production security issues using distributed tracing and monitoring tools.

What we're looking for

5+ years of experience in Security Engineering for SMTS level (preferred).
7+ years of experience in Security Engineering for LMTS level (preferred).
9+ years of experience in Security Engineering for PMTS level (preferred).
Strong experience in Go, Java, or Python with a solid grasp of Object-Oriented Programming and automation.
Deep experience with GCP and Terraform for managing cloud security posture and infrastructure.
Practical experience with network protocols, OS hardening (Linux), and modern attack vectors.
Experience with secure software development lifecycle practices (preferred).
Experience with container security tools such as Docker and Kubernetes (preferred).