Salesforce.com, Inc Infrastructure Security Engineer (Design Review) in Burlington, Massachusetts
To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.
Products and Technology
Security Infrastructure Engineer
Trust is the #1 company value at salesforce. Our team secures the shared-services, platforms and shared infrastructure used by organizations to develop & deploy various Salesforce services.
You'll work partner with product software engineers to design, threat-model and verify the implementations of these services and educate our teams on secure application development and emerging threats. In addition, you will create new tools, conduct industry-leading research, and solve challenging technical problems on the forefront of security.
Demonstrated ability and experience securing large complex enterprise architectures or systems deployed in public cloud
Demonstrated ability and experience performing threat modeling / data flow diagramming / architecture risk analysis, identifying bugs and flaws and driving work items from these activities to resolution
Demonstrated ability to work with engineers to identify the tradeoffs of different solutions and recommend the ideal design that meets the team’s (non)-functional requirements as well as our security requirements.
A passion around improving security development lifecycle and delivering security guidance to engineers in language they understand.
Strong writing and presentation skills. Should be able to communicate at all levels in the organizations and in some situations act as a technical writer. Possess the ability to communicate concisely, clearly, and intelligently to partners from a variety of backgrounds, including those who are non-technical.
Offensive mindset: consider abuse and attack paths as well as the defensive mindset to recommendations to prevent them
Ability to suggest well written and complete remediation guidelines for the bugs found during the review.
Ability to adapt to evolving security and business priorities quickly and effectively.
Presentation/communication skills, particularly for an executive audience
Ability to work with data, identify trends and propose comprehensive mitigations that eradicate systemic security concerns
Experience managing or participating in an information security program and improving or proposing improvements to a secure development lifecycle
Some experience performing penetration testing or familiarity with the process
Familiarity with compliance and security requirements and an ability to translate these product requirements.
Reasonable understanding of cryptography and able to recommend standard solutions for protecting data at rest and in storage, transport and identity purposes
A functional understanding of one or more public cloud providers: AWS / GCP / Azure
Experience with building or specifying requirements for security automation
Working knowledge of the OWASP Top 10 Security vulnerabilities and/or WASC 25 Security Vulnerabilities
Bachelor's Degree preferred
Accommodations - If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form. at http://cloud.mail.salesforce.com/accommodations-request-form
At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits.
Salesforce.com at http://salesforce.com/ and Salesforce.org at http://salesforce.org/ are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce.com at http://salesforce.com/ and Salesforce.org at http://salesforce.org/ do not accept unsolicited headhunter and agency resumes. Salesforce.com at http://salesforce.com/ and Salesforce.org at http://salesforce.org/ will not pay any third-party agency or company that does not have a signed agreement with Salesfore.com at http://salesfore.com/ or Salesforce.org.
Salesforce welcomes all.
Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.
Founded in 1999, Salesforce is the global leader in Customer Relationship Management (CRM). Companies of every size and industry are using Salesforce to transform their businesses, across sales, service, marketing, commerce, and more by connecting with customers in a whole new way. We harness technologies that can revolutionize companies, careers, and, hopefully, our world.
Salesforce is built on a set of four core values: Trust, Customer Success, Innovation, and Equality. By making technology more accessible, we're helping create a future with greater opportunity and equality for all. This has taken our company to great heights, including being ranked by Fortune as one of the “Most Admired Companies in the World” and one of the “100 Best Companies to Work For” eleven years in a row, and named “Innovator of the Decade” and one of the “World’s Most Innovative Companies” eight years in a row by Forbes.
There are those who choose to work with the best and brightest. And then, there are those who want to do more than just a job. They are the ones improving lives, not only their careers. Having an impact now instead of later. Doing something that’s so much bigger than themselves, an industry, and their company.
We believe everyone can be a Trailblazer. Join Salesforce and discover a future of new opportunities.
- Salesforce.com, Inc Jobs