Salesforce Security Engineer

Job Description

We are seeking a skilled Salesforce Developer with strong application security experience to design, develop, and secure Salesforce applications. This role combines Salesforce development and programming responsibilities with security engineering, focusing on custom Apex code, secure integrations, vulnerability remediation, and Salesforce platform security.

The ideal candidate will have hands-on experience developing Salesforce solutions while ensuring code quality, data protection, and compliance with security best practices.

Key Responsibilities

• Design, develop, test, and maintain custom Salesforce applications using Apex, Lightning Web Components (LWC), and Salesforce APIs.

• Review and secure custom Apex code to identify vulnerabilities and prevent common application security risks.

• Implement secure coding practices, including input validation, output encoding, and protection against SOQL injection.

• Apply Salesforce security controls, including profiles, permission sets, sharing rules, role hierarchies, and field-level security.

• Perform secure code reviews and support static application security testing (SAST), vulnerability assessments, and remediation activities.

• Identify and resolve security issues in Salesforce customizations, integrations, and application components.

• Develop and maintain secure REST/SOAP API integrations with external systems.

• Ensure proper authentication, authorization, and access control for Salesforce applications and integrations.

• Collaborate with development, security, architecture, and business teams to implement secure solutions.

• Support CI/CD pipelines, automated testing, code quality checks, and secure deployment practices.

• Document technical designs, security findings, remediation plans, and development standards.

Required Technical Skills

• Strong hands-on experience with Salesforce development and custom Apex programming.

• Proficiency in Apex, SOQL, SOSL, Lightning Web Components (LWC), and Salesforce APIs.

• Knowledge of Salesforce platform security architecture and access control mechanisms.

• Experience with secure coding practices and application security vulnerability remediation.

• Understanding of common web application vulnerabilities, including OWASP Top 10, injection attacks, and broken access control.

• Experience with static code analysis, secure code reviews, and vulnerability scanning tools.

• Knowledge of API security, OAuth 2.0, authentication, and authorization.

• Familiarity with Salesforce DX, Git, and CI/CD tools.

• Strong debugging, problem-solving, and code review skills.

Preferred Qualifications

• Salesforce Platform Developer I or Platform Developer II certification.

• Experience with Salesforce security tools such as Salesforce Code Analyzer, PMD, Checkmarx, or similar static analysis tools.

• Experience implementing DevSecOps practices in Salesforce development pipelines.

• Knowledge of data protection, encryption, secrets management, and security compliance requirements.

• Experience working in enterprise environments with strict security standards.