Salesforce Security Engineer, Salesforce Success Central

About the role

Do you want to build security tools that protect a large fleet of Salesforce instances across Amazon? Are you interested in applying deep Salesforce platform knowledge to solve security challenges at this scale? Do you want to use AI to invent and simplify?

Responsibilities

• Build and maintain automated security scanning and evaluation capabilities that assess Salesforce org configurations against defined security standards
• Apply deep Salesforce platform knowledge to identify security risks in profiles, permission sets, sharing rules, connected apps, session settings, and custom Apex code
• Develop detections for configuration changes that introduce security risk, and deliver escalation workflows that route findings to the right owners
• Partner with service owners to interpret security findings, prioritize remediation, and implement secure configurations within their Salesforce environments
• Write and refine security evaluations that measure operational maturity across the Salesforce fleet
• Create customer-facing guidance, documentation, and training that help service owners understand and resolve Salesforce security findings independently
• Collaborate with Amazon enterprise security teams to translate security requirements into Salesforce-specific implementation patterns
• Stay current with Salesforce platform releases, AI innovations, and security features, assessing their impact on Amazon's security posture and updating tooling accordingly
• Support other teams performing security reviews, vulnerability analysis, and incident response when Salesforce expertise is required

Qualifications

• 2+ years of scripting, programming, and security code review in a common programming language
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or equivalent experience in IT Security
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience using Salesforce
• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Experience with AWS products and services
• 4+ years of hands-on experience with the Salesforce platform, including administration, security configuration, and development
• Proficiency in SOQL for data extraction and security detection, with working knowledge of Salesforce metadata schema and platform APIs
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC)