Enterprise Security Engineer (pen Testing)

Salesforce

San Francisco, California, United States
Base: $117,200 - $176,700 annually (select cities ...
Full stack security assessments
Web applications and saas
Network infrastructure security
Perform full stack security assessments across a diverse and sophisticated range of environments including web applications, operating systems, network infrastructure, and public cloud platforms

Job Summary

  • Perform full stack security assessments across a diverse and sophisticated range of environments including web applications, operating systems, network infrastructure, and public cloud platforms.
  • Collaborate with engineering teams and business partners to drive solutions through a secure development lifecycle and define technical security standards.
  • Research new technologies, emerging threats, and vulnerabilities for strategic planning and process improvements.

Matching Summary

Perform full stack security assessments across a diverse and sophisticated range of environments including web applications, operating systems, network infrastructure, and public cloud platforms.

Salary

Base: $117,200 - $176,700 annually (select cities $141,200 - $194,200); Bonus/Equity: Not specified; Benefits: Not specified

Skills & Requirements

Must-have

  • Full stack security assessments
  • Web applications and SaaS
  • Network infrastructure security
  • Cloud infrastructure security
  • Threat modeling attacker methods
  • Automated process development
  • Secure development lifecycle

Nice-to-have

  • AI-driven customer success
  • Workforce transformation
  • Agentforce future of AI
  • Balancing security and agility

Key Requirements

  • 2-4 years of experience in security role
  • Application and network security focus
  • Penetration testing experience
  • Security engineering experience
  • Infrastructure engineering experience
  • Threat modeling experience
  • Red team operations experience
  • Firewall/access control technologies
  • Risk management experience
  • Endpoint security controls experience
  • Knowledge of network security models and protocols
  • Knowledge of application security
  • Knowledge of operating systems internals and vulnerabilities
  • Knowledge of public key infrastructure and digital certificates
  • Knowledge of exploit mitigation techniques
  • Hands-on experience with BurpSuite, Nexpose, Nessus, Metasploit, Nmap
  • Experience performing code reviews
  • Experience in cloud environments (AWS, Azure, Google Cloud)
  • Excellent communication skills
  • Related technical degree required

Work Rights

Not specified

Tailored Resume

Cover Letter