Software Security Engineer (Distributed Systems)

Join our team as a Software Security Engineer and help advance the integration of Salesforce applications on Google Cloud Platform (GCP). You will be responsible for enhancing our security posture across various domains, focusing on development, vulnerability management, infrastructure security, and the security of distributed systems. You will build and integrate high-performance security tools, develop and secure Terraform/IaC templates, lead the end-to-end vulnerability lifecycle, conduct threat modeling and architectural reviews, act as the technical lead for audits, and troubleshoot complex security issues in production.

• Enhancing the security posture across various domains, focusing on development, vulnerability management, infrastructure security, and the security of distributed systems.
• Building and integrating high-performance security tools and custom scripts into CI/CD pipelines to automate manual toil.
• Leading the end-to-end vulnerability lifecycle, using a risk-based approach to prioritize remediation across network, cloud, and application layers.
• Engineering Mindset: 2+ years of experience for MTS, 5+ years for SMTS, in Security Engineering with a focus on building tools, not just managing them
• Familiarity with container security technologies (e.g., Docker, Kubernetes)
• Experience in secure software development lifecycle (SDLC) practices
• Security Domain Knowledge: Practical experience with network protocols, OS hardening (Linux), and modern attack vectors
• Cloud & Infrastructure Expertise: Deep experience with GCP (similar) and Terraform for managing cloud security posture (CSPM) and infrastructure
• We are seeking a proactive and skilled Software Security Engineer to join our GCP team
• This role requires hands-on experience with security systems, a deep understanding of modern threats, and the ability to drive security improvements through engineering solutions
• Collaborative Spirit: A desire to work cross-functionally with DevOps to embed security into the SDLC
• Coding Proficiency: Strong experience in Go, Java, or Python with a solid grasp of Object-Oriented Programming and automation
• Experience with developing or contributing to open source tools