Software Security Engineer - SMTS/LMTS/PMTS

Salesforce seeks a Software Security Engineer for its GCP team. The role focuses on securing distributed services through security automation, hardened cloud infrastructure, vulnerability management, threat modeling, compliance support, and production troubleshooting.

Responsibilities:

• Build and integrate high-performance security tools and custom scripts into our CI/CD pipelines (SAST/DAST, SCA, SIEM) to automate manual toil
• Develop and secure Terraform/IaC templates to ensure our cloud infrastructure is hardened by design before it ever reaches production
• Lead the end-to-end vulnerability lifecycle, using a risk-based approach to prioritize remediation across network, cloud, and application layers
• Partner with DevOps and Product teams to conduct threat modeling and architectural reviews, ensuring new features are resilient and scalable
• Act as the technical lead for audits (SOC2, ISO 27001), leveraging automation to provide evidence of consistent monitoring and timely closure of risks
• Troubleshooting and resolving complex security issues in production using distributed tracing and modern monitoring tools

Requirements:

• 5+ years for SMTS, 7+ years for LMTS; 9+ years for PMTS in Security Engineering with a focus on building tools, not just managing them
• Strong experience in Go, Java, or Python with a solid grasp of Object-Oriented Programming and automation
• Deep experience with GCP (similar) and Terraform for managing cloud security posture (CSPM) and infrastructure
• Practical experience with network protocols, OS hardening (Linux), and modern attack vectors
• You have experience with secure software development lifecycle practices
• You know container security tools such as Docker and Kubernetes
• You have built or contributed to open source tools