Software Security Engineer (Distributed Systems)

Join our team as a Software Security Engineer and help advance the integration of Salesforce applications on Google Cloud Platform (GCP). You will enhance our security posture across various domains, focusing on development, vulnerability management, infrastructure security, and the security of distributed systems. Your responsibilities will include building and integrating high-performance security tools, developing and securing Terraform/IaC templates, leading the end-to-end vulnerability lifecycle, conducting threat modeling and architectural reviews, acting as the technical lead for audits, and troubleshooting complex security issues in production.

• Enhancing the security posture across various domains, focusing on development, vulnerability management, infrastructure security, and the security of distributed systems.
• Building and integrating high-performance security tools and custom scripts into CI/CD pipelines to automate manual toil.
• Leading the end-to-end vulnerability lifecycle, using a risk-based approach to prioritize remediation across network, cloud, and application layers.

• Engineering Mindset: 2+ years of experience for MTS, 5+ years for SMTS, in Security Engineering with a focus on building tools, not just managing them
• Coding Proficiency: Strong experience in Go, Java, or Python with a solid grasp of Object-Oriented Programming and automation
• We are seeking a proactive and skilled Software Security Engineer to join our GCP team
• Experience with developing or contributing to open source tools
• Collaborative Spirit: A desire to work cross-functionally with DevOps to embed security into the SDLC
• This role requires hands-on experience with security systems, a deep understanding of modern threats, and the ability to drive security improvements through engineering solutions
• Security Domain Knowledge: Practical experience with network protocols, OS hardening (Linux), and modern attack vectors
• Cloud & Infrastructure Expertise: Deep experience with GCP (similar) and Terraform for managing cloud security posture (CSPM) and infrastructure
• Experience in secure software development lifecycle (SDLC) practices
• Familiarity with container security technologies (e.g., Docker, Kubernetes)