Lead Software Engineer, Application Security and DDoS

Salesforce - San Francisco, CA

Full-time - Senior

San Francisco, CA

Publishing Industries

About the position

The Lead Software Engineer for Application Security and DDoS at Salesforce will play a crucial role in securing the company's CRM by designing, building, and maintaining innovative security services and solutions. This position involves close collaboration with partner teams to develop integrated solutions and respond to security incidents, ensuring the protection of both internal and external customers.

Responsibilities

• Architect and implement distributed systems to deliver security controls at the network level in Salesforce's public and private clouds.
• Develop software solutions and microservices to support network security platforms at various levels, including low-level OS components and user interfaces.
• Advance and operate security platforms in a full DevOps model.
• Support engineering excellence by performing code reviews and mentoring junior team members.
• Collaborate with other engineering teams and executives to develop short and long-term security, product, and service strategies.
• Work with other teams to solve security problems with minimal disruption to business functions.

Requirements

• 8+ years in Infrastructure or Security Architecture.
• 3+ years experience in SaaS, PaaS or IaaS software development.
• 3+ years experience in networking, security, or DDoS.
• 3+ years experience in a high-availability 24/7 environment, preferably in cloud platforms.
• Demonstrated experience in designing and coding large-scale PaaS or IaaS systems for public cloud providers (e.g., AWS, Azure, Google Cloud Platform, Alibaba Cloud).
• Proficiency in object-oriented and multi-threaded programming in at least one of the following languages: Golang, Java, C++, Python.
• Experience in development and software management on Linux systems (e.g., CentOS, RHEL).
• Strong ownership over code with a DevOps approach (test, monitor, deploy, maintain).
• Industry-level expertise in networking and application security, including denial of service attacks and mitigation strategies.
• Familiarity with OWASP top 10 vulnerabilities, CWE, and related countermeasures.
• Experience with network security platforms, including segmentation, ACLs, and DDoS protection.

Nice-to-haves

• Expertise in designing, implementing, and operating distributed systems architectures and concepts.
• 5+ years of experience in Application Security or Security Architecture.