Enterprise Security Lead

Salesforce - San Francisco, CA

Full-time - Mid Level

San Francisco, CA

Publishing Industries

About the position

The Enterprise Security Lead Engineer at Salesforce is responsible for securing the enterprise environment that supports a rapidly growing workforce. This role involves collaborating with technology and business partners to understand their objectives, identify threats, and scale security programs. The position requires performing full stack security assessments, mentoring teams on security requirements, and driving solutions through a secure development lifecycle while balancing security with business agility.

Responsibilities

• Perform full stack security assessments including architecture and design reviews, code reviews, and penetration tests across various environments.
• Assess security across operating systems, network infrastructure, authentication services, public cloud platforms, middleware, and web applications.
• Develop threat models based on attacker methods and provide mentorship on mitigation techniques.
• Collaborate with engineering teams and business partners to implement secure development practices.
• Define and develop technical security standards and guidelines in partnership with business stakeholders.
• Research emerging technologies, threats, and vulnerabilities for strategic planning and process improvements.

Requirements

• Bachelor's degree or equivalent experience in Computer Science, Engineering, Enterprise Security or related fields.
• 6+ years of experience in a security role focusing on application and network security, security engineering, incident response, penetration testing, and risk management.
• Strong knowledge of network security models, operating systems vulnerabilities, public key infrastructure, and application security.
• Experience with security assessment tools such as BurpSuite, Nexpose, Nessus, Metasploit, and Nmap.
• Hands-on experience with security testing of cloud environments (AWS, Azure, Google Cloud).

Nice-to-haves

• Scripting experience in Bash, PowerShell, Python, Java, or JavaScript/NodeJS.
• Security certifications such as OSCP, OSEP, GCIH, GCIA, GPEN, or CCIE Security.
• Experience in network traffic analysis and engineering network security solutions.
• Experience writing security white papers or speaking at industry conferences.
• Knowledge of security practices on the Salesforce platform and related technologies.

Benefits

• Flexible work hours
• Remote work options
• Career growth opportunities
• Health insurance
• 401k plan