To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category
Products and Technology

Job Details

Job Description

Salesforce - the leader in enterprise cloud computing and one of the top 10 places to work according to Fortune magazine - is seeking engineers to improve the coverage, quality and reliability of our security alerts and logs.

The Threat Detection team is the author of all the detections written to detect attacks against Salesforce's infrastructure and its customers. We work closely with the CSIRT team that responds to our alerts and the engineering team that builds the platforms we rely on.

You will be responsible for writing signatures and detections on a wide variety of security platforms to detect adversaries. You will need to write code to build attack simulation scenarios and supporting infrastructure, to validate and improve Salesforce's detection testing framework. You will also work with partner engineering teams to develop technology that enables that work. You will closely collaborate with the incident response team to improve the reliability and quality of detections. Your technical skills, collaboration and teamwork will help ensure that our detection system works well for our team and partners across the globe. If you like collaboratively finding and fixing problems across a range of technologies to improve an area critical to our company's most core value, Trust, you'll probably like this position.

This position requires US citizenship.

Required Skills:

• Minimum 2 years of experience working with any general information security domain.
• Ability to code in Python (or equivalent language).
• Ability to write SQL statements for detection development.
• Working knowledge of threat detection/incident response/vulnerability analysis/product security/security testing.
• Fundamental knowledge of security-related logs from industry standard detection tools.
• Solid understanding of TCP/IP and network fundamentals.
• Foundational knowledge of identity and access management, ACLs, principle of least privilege, types of vulnerability, and other security fundamentals.
• Effective communication & collaboration skills.

Preferred Skills:

• Hands-on experience with public clouds, such as AWS, Azure, or GCP with a focus on security.
• Experience with big data streaming technologies such as Apache Flink/Storm/Spark or Amazon Kinesis.
• Experience with any security detection and response technology products such as SOAR/SIEM.
• Fundamental understanding of OWASP and security engineering principles.
• Working knowledge of CI/CD.
• Working knowledge of Operating System security.
• Experience working in a globally distributed team.
• Experience with Salesforce administration and APEX development.

• Undergraduate degree in computer science, information technology, cybersecurity, or similar subjects.

This candidate must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship and agrees to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits.

Salesforce.com and Salesforce.org are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce.com and Salesforce.org do not accept unsolicited headhunter and agency resumes. Salesforce.com and Salesforce.org will not pay any third-party agency or company that does not have a signed agreement with Salesforce.com or Salesforce.org.

Salesforce welcomes all.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.