About the position
Salesforce Inc. seeks Software Engineer II Product Security in San Francisco, CA. The role involves identifying emerging classes of vulnerabilities and developing solutions for them before they become a problem. The candidate will contribute security-focused feedback to engineers during all phases of the development lifecycle, perform technical security assessments on web applications, native clients, internal services, and partner applications. Additionally, the role requires communicating risks to engineering staff through training and technical demonstrations of vulnerabilities and secure design patterns. The candidate will efficiently scope blackbox, whitebox, and graybox assessments to optimize security review time and resources, maintain and create secure development practices and programs for the engineering teams and external developers, and act as an ambassador for security within Slack, engaging in internal and external speaking engagements.
Responsibilities
- Identify emerging classes of vulnerabilities and develop solutions for them.
- Contribute security-focused feedback to engineers during all phases of the development lifecycle.
- Perform technical security assessments on web applications, native clients, internal services, and partner applications.
- Communicate risks to engineering staff through training and technical demonstration of vulnerabilities and secure design patterns.
- Efficiently scope blackbox, whitebox, and graybox assessments to optimize security review time and resources.
- Maintain and create secure development practices and programs for the engineering teams and external developers.
- Act as an ambassador for security within Slack.
- Engage in internal and external speaking engagements as a public representative for security.
Requirements
- Master’s degree, or foreign equivalent, in Computer Science, Cybersecurity, Engineering, or closely related quantitative discipline.
- Two (2) years of experience in job offered or in any occupation in a related field.
- A related technical degree required (Computer Science, Cybersecurity, Engineering).
- 2 years in each of the following: Architecture Reviews, Threat Modelling, Cloud Security, AWS, Owasp Top 10 methodology, Network Security, Penetration Testing, OAuth, SAML, GCP, Java, and Python.
Benefits
- Incentive compensation
- Equity
- Comprehensive benefits package
