Security Engineering - Infrastructure Security and

Security Engineering - Infrastructure Security and

**Job Category**:Products and Technology

**Job Details**:**We are looking for the best security engineers in the world.**

We are hiring for mid, senior, lead, and principal level security engineers on our Enterprise Security, Product Security and Infrastructure Security teamsSecurity Assurance ensures that no significant security risks escape into _customer-facing products _, the supporting _infrastructure _, or our _enterprise _technology stack by proactively scaling security practices at all stages of a project's lifecycle.

Security Assurance functions include design assessments, implementation, vendor and security reviews, as well as our Secure Development Lifecycle, bug bounty,





and penetration testing programs including the Offensive Security Team.

**Infrastructure Security**:
The Infrastructure Security Assurance team focuses on everything running in production and R&D; from the app layer down.
- Ability to securing large complex enterprise architectures or systems deployed in public cloud
- Demonstrated ability and experience performing threat modeling / data flow diagramming / architecture risk analysis, identifying bugs and flaws and driving work items from these activities to resolution
- Demonstrated ability to work with engineers to identify the trade-offs of different solutions and recommend the ideal design to meet security requirements
- Penetration testing, infrastructure, secure software development lifecycle, vulnerability assessments and remediation. Work with Infrastructure engineering teams throughout the SSDL to ensure their efforts are secure.

**Product Security**:
**Responsibilities**:

- Perform _black-box penetration testing and code reviews _of our flagship services,





product offerings and partners apps.
- Guide the technology organization's security and privacy initiatives by participating in _design reviews and threat modeling.
- Participate in our incident response and vulnerability remediation efforts.
- Perform cutting-edge applied research on new attacks and present new findings to both internal and external audiences.
- Develop secure code practices and provide hands-on training to developers and quality engineers.

**Locations**:US REMOTE

**Minimum Qualifications for all roles**:

- BS/MS degree, or relevant work experience
- 5+ years exp in Security Engineering
- Cloud experience, AWS
- Expert knowledge in computer and cloud Infra security






- Extensive knowledge of the OWASP Top 10 and CWE Top 25
- Experience in exploiting web and web services security vulnerabilities including cross-site scripting, cross site request forgery, SQL injection, DoS attacks, XML/SOAP, API attacks, and more.
- Experience in software development, Java, PHP, Perl, Python, Ruby, or other relevant languages
- BS Computer Science or equivalent knowledge and experience
- A hacker's mindsetStatement from Salesforce

Salesforce, the Customer Success Platform and world's #1 CRM, empowers companies to connect with their customers in a whole new way. The company was founded on three disruptive ideas: a new technology model in cloud computing, a pay-as-you-go business model, and a new integrated corporate philanthropy model.





These founding principles have taken our company to great heights, including being named one of Forbes’s “World’s Most Innovative Company” five years in a row and one of Fortune’s “100 Best Companies to Work For” eight years in a row. We are the fastest growing of the top 10 enterprise software companies, and this level of growth equals incredible opportunities to grow a career at Salesforce. Together, with our whole team made up of our employees, customers, partners, and communities, we are working to improve the state of the world!

LI-Y

**Accommodations

**Posting Statement**:At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces.





We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits.

Salesforce welcomes all.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.

As a federal contractor, Salesforce is required to verify that all US-based employees are fully vaccinated against COVID-19. If you receive an offer and are unable to get vaccinated for religious or medical reasons, you may request a reasonable accommodation.

▶️ Security Engineering - Infrastructure Security and
🖊️ Salesforce
📍 La Florida