Salesforce Security Engineer

Responsibilities:

• Own and drive security incident response activities for the Salesforce Service Cloud platform, including incident triage, containment support, remediation coordination, stakeholder communication, post-incident reviews, and documentation.
• Receive, classify, triage, prioritize, and track vulnerabilities identified through client-provided security scans using client-approved severity classifications and risk assessment frameworks.
• Work closely with Client security teams to assess vulnerabilities, evaluate exploitability, prioritize remediation efforts, and develop risk mitigation strategies.
• Develop, manage, and track remediation plans for security findings, ensuring timely closure through approved change, release, and deployment processes.
• Plan, coordinate, and oversee the implementation of security patches, hotfixes, and platform security updates in accordance with established release management procedures.
• Support penetration testing activities by coordinating with Client stakeholders and third-party testing vendors, facilitating evidence collection, triaging findings, tracking remediation progress, and validating closure evidence.
• Provide security architecture guidance and recommendations during platform enhancements, integrations, and system modifications to ensure ongoing compliance with security standards and best practices.
• Participate in solution design and architecture reviews for significant platform changes, documenting security risks, observations, and recommended mitigation measures.
• Conduct or support Salesforce Security Health Checks, configuration security reviews, audit log analysis, and platform security assessments where access and permissions permit.
• Collaborate with Client security and operational teams to maintain incident records, remediation documentation, root cause analyses, and post-incident review artifacts.
• Monitor and report on security operations metrics, including vulnerability backlogs, patch compliance status, overdue remediation actions, penetration testing findings, and post-incident action items.
• Prepare and provide monthly security governance reports summarizing security posture, remediation progress, incident trends, compliance status, and risk management activities.

Required Skills & Experience

• Strong experience with Salesforce Service Cloud administration, security architecture, and platform governance.
• Hands-on experience in Security Operations, Vulnerability Management, and Incident Response processes.
• Experience interpreting vulnerability assessment and penetration testing results and driving remediation activities.
• Knowledge of Salesforce security controls, Security Health Check, profiles, permission sets, sharing models, encryption, event monitoring, and audit capabilities.
• Familiarity with enterprise security frameworks, risk management practices, and compliance requirements.
• Strong stakeholder management skills with the ability to collaborate effectively across security, business, and technology teams.
• Excellent analytical, documentation, communication, and reporting skills.