Salesforce Security Engineer, Salesforce Success Central

Summary

Amazon Web Services (AWS) is a comprehensive cloud platform provider, and Salesforce Success Central supports enterprise-wide Salesforce deployments across Amazon. The Salesforce Security Engineer will build automated security scanning, detection, and evaluation tools, advise service owners on remediation and secure configurations, and partner with enterprise security teams to improve Salesforce security at scale.

Responsibilities

• Build and maintain automated security scanning and evaluation capabilities that assess Salesforce org configurations against defined security standards
• Apply deep Salesforce platform knowledge to identify security risks in profiles, permission sets, sharing rules, connected apps, session settings, and custom Apex code
• Develop detections for configuration changes that introduce security risk, and deliver escalation workflows that route findings to the right owners
• Partner with service owners to interpret security findings, prioritize remediation, and implement secure configurations within their Salesforce environments
• Write and refine security evaluations that measure operational maturity across the Salesforce fleet
• Develop customer-facing guidance, documentation, and training that help service owners understand and resolve Salesforce security findings independently
• Collaborate with Amazon enterprise security teams to translate security requirements into Salesforce-specific implementation patterns
• Stay current with Salesforce platform releases, AI innovations, and security features, assessing their impact on Amazon's security posture and updating tooling accordingly
• Support other teams performing security reviews, vulnerability analysis, and incident response when Salesforce expertise is required

Skills

• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience using Salesforce
• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience with AWS products and services
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing
• 4+ years of hands-on experience with the Salesforce platform, including administration, security configuration, and development
• Proficiency in SOQL for data extraction and security detection, with working knowledge of Salesforce metadata schema and platform APIs

Qualifications

Must Haves

• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience using Salesforce

Nice to Haves

• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience with AWS products and services
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing
• 4+ years of hands-on experience with the Salesforce platform, including administration, security configuration, and development
• Proficiency in SOQL for data extraction and security detection, with working knowledge of Salesforce metadata schema and platform APIs

Benefits

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance, including medical, dental, vision, prescription, Basic Life & AD&D insurance, option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, and Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave
• Endless knowledge-sharing, mentorship and other career-advancing resources
• Flexibility as part of our working culture