Salesforce Security Specialist

Title: Salesforce Security Specialist

Location: Remote

Duration: Long Term

Client: Victory capital management

Experience: 10+ Years

MOI: Virtual

Note: Must have Salesforce security and Okta

Job Description

The Salesforce Security Specialist leads security assessments of client Salesforce environments. The role runs the review, performs the hands-on checks, and signs off every finding that goes to the client. The specialist is the senior technical voice in front of client security, platform, and leadership teams.

Required Skills - Assessment leadership; Identity and sign-in (Okta to Salesforce); Integrations and AWS; Permissions, sharing, and code; Logging and response; Reporting and client communication

Job Duties - The assignment is a three-week security review for a financial services client. Scope covers two Salesforce orgs: an established org with accumulated technical debt and a new Financial Services Cloud org approaching launch. It also covers the Okta sign-in path into both orgs and roughly a dozen integrations that run through AWS Lambda. All work is read-only in production, with anything hands-on done in a sandbox.

Job Responsibilities

Job Requirements - Experience. 8+ years of hands-on Salesforce experience, with at least 3 years in a technical lead or technical architect role.

* Security model. Expert knowledge of the Salesforce access model, including effective-access analysis across profiles, permission sets, sharing, and field-level security.

* Identity. Hands-on configuration of Salesforce SSO with Okta or a comparable IdP, MFA, session security, connected apps, OAuth flows, Named Credentials, and integration users.

* Code review. Ability to read and review Apex and Flows for security defects, and working experience with Salesforce Code Analyzer or comparable static analysis tools.

* Logging. Working knowledge of Salesforce Shield or Event Monitoring, audit logs, and log export to a SIEM.

* Integrations. Understanding of AWS services commonly used in Salesforce integrations (Lambda, S3, IAM, Secrets Manager) sufficient to review the Salesforce-facing side.

* Communication. Experience writing evidence-based findings and presenting them to both executives and technical teams.

* Assessment experience. Prior work in a security assessment, audit, or remediation engagement on Salesforce.

Desired Skills & Experience - Salesforce Certified Identity and Access Management Architect

* Salesforce Certified Sharing and Visibility Architect

* Salesforce Platform Developer I or II; Salesforce Platform Administrator

* Financial Services Cloud Accredited Professional, or delivery experience on Financial Services Cloud

* A recognized security certification such as CISSP, CCSP, or AWS Certified Security, Specialty

* Experience in regulated financial services, including asset or investment management

* Familiarity with Salesforce policy for customer-initiated security assessments