Salesforce.com, Inc Senior Infrastructure Security Engineer in San Francisco, California

Job CategoryProducts and Technology

Job Details

Trust is the #1 company value at Salesforce. Our Security team ensures the security of our product delivery and serves as subject matter experts for our infrastructure and network operations teams in today's rapidly evolving threat landscape. We are a team of curious minds that specialize in security research, penetration testing, and innovative tool development. We work in a large scale, multi-tenant environment that includes Linux OS, AWS and other environments.Your role will be to work with infrastructure and product security team members, utilizing your deep Linux OS, AWS security, related automation software and web application security software skills to find vulnerabilities, and coach internal teams on remediation. You will also help to ensure that related security policies and procedures are adhered to with the goal of keeping Salesforce data secure. You'll work closely with the technology organization to evaluate the design and implementation and upgrades/modifications to our data centers and public cloud environments. You will also help to educate infrastructure security software engineering teams on secure application development and emerging threats. In addition, you will create new tools, conduct industry-leading research, and solve challenging technical problems on the forefront of Linux OS and application security.Responsibilities- Enumerate vulnerabilities with Linux OS/Tools, internally developed Linux OS automation tools, AWS environments, APIs as well as 3rd party vendor solutions- Provide security guidance and oversight to engineering and operational teams by participating in design reviews and threat modeling for Linux OS, AWS and related web application security- Develop hardening guidelines and review security configurations related to Linux/Unix hosts, AWS deployments and common web application frameworks- Provide security guidance and architectural review for infrastructure delivery with both physical data centers and AWS environments- Research new security technologies and perform cutting-edge research on new attacksMinimum Qualifications- B.S. / M.S. in Computer Science, Electrical Engineering or related work experience- 5+ years of work experience in Linux OS security role- Work experience in a web application security role- Work experience with AWS environments and associated security role- Relevant experience in at least 2 of these languages with reasonable proficiency: Java, Javascript/ Node.js,, C, Python, Perl, Ruby, Go, Java, PHP- Experience identifying and mitigating security vulnerabilities in web applications and operating systems- Experience working with RedHat Enterprise Linux (RHEL) or other Unix/Linux operating systems Bonus Points- Expertise in database security with Oracle, MySQL or PostgeSQL- Network security penetration testing and vulnerability assessments- Expertise with virtualization and hypervisor security- Embedded device firmware analysis or reverse engineering experience- Background with automated configuration management and/or build management tools Company Overview:Salesforce, the Customer Success Platform and world's #1 CRM, empowers companies to connect with their customers in a whole new way. The company was founded on three disruptive ideas: a new technology model in cloud computing, a pay-as-you-go business model, and a new integrated corporate philanthropy model. These founding principles have taken our company to great heights, including being named one of Forbes’s “World’s Most Innovative Company” six years in a row and one of Fortune’s “100 Best Companies to Work For” nine years in a row. We are the fastest growing of the top 10 enterprise software companies, and this level of growth equals incredible opportunities to grow a career at Salesforce. Together, with our whole Ohana (Hawaiian for "family") made up of our employees, customers, partners and communities, we are working to improve the state of the world. *LI-Y

Posting Statement

Salesforce.com and Salesforce.org are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Headhunters and recruitment agencies may not submit resumes/CVs through this Web site or directly to managers. Salesforce.com and Salesforce.org do not accept unsolicited headhunter and agency resumes. Salesforce.com and Salesforce.org will not pay fees to any third-party agency or company that does not have a signed agreement with Salesforce.com or Salesforce.org.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.

Salesforce, the Customer Success Platform and world's #1 CRM, empowers companies to connect with their customers in a whole new way. We are the fastest growing of the top 10 enterprise software companies, the World's Most Innovative Company according to Forbes, and one of Fortune's 100 Best Companies to Work For six years running. The growth, innovation, and Aloha spirit of Salesforce are driven by our incredible employees who thrive on delivering success for our customers while also finding time to give back through our 1/1/1 model, which leverages 1% of our time, equity, and product to improve communities around the world. Salesforce is a team sport, and we play to win. Join us!