CybersecurityJobs.io
← Back to all jobs
Steampunk

Salesforce Security Engineer

Steampunk
McLean, VA Full time Posted 1h ago
Application Security Identity and Access Management Incident Response Information Security InfoSec Salesforce Salesforce Security Salesforce Shield Security Compliance Security Engineer Security Engineering Security Information And Event Management Security Monitoring Security Operations Splunk
Apply Now

Job Description

Steampunk is hiring a Salesforce Security Engineer to serve as the primary security point of contact across the Salesforce environment.

Responsibilities

  • Design, implement, and audit Salesforce access controls including profiles, permission sets, roles, sharing rules, and field-level security, using least-privilege principles across all user populations.
  • Run periodic access reviews and recertifications to find and remediate overly permissive or outdated entitlements.
  • Configure and maintain Salesforce security controls in the Setup Menu, including session settings, login IP restrictions, password policies, MFA enforcement, Health Check, Shield Platform Encryption, and Event Monitoring.
  • Build and maintain Splunk queries and dashboards for monitoring Salesforce login events, permission changes, and anomalous access patterns; use log analysis to support incident investigation.
  • Assess and harden security for Salesforce Connected Apps, focusing on internet-facing settings such as CORS, CSP, Trusted URLs, OAuth/Connected App policies, and session security.
  • Support ISSO activities by assisting application security efforts and collecting required security artifacts for assessment and authorization.
  • Coordinate with system owners and compliance teams to ensure configurations align with federal security requirements (including NIST 800-53 and FedRAMP, as applicable).
  • Document security configurations, findings, and remediation actions for audit and ATO support.
  • Review and provision privileged user access.

Requirements

  • Ability to obtain and maintain a U.S. Government security clearance.
  • Bachelor’s degree.
  • 8–10 years of experience in Salesforce administration or security engineering.
  • Strong knowledge of Salesforce access control models: profiles, permission sets, roles, and sharing rules, with demonstrated least-privilege implementation.
  • Extensive experience configuring Salesforce Setup Menu security settings, including session security, login policies, Health Check, Event Monitoring, and Shield.
  • Proficiency writing Splunk SPL for log analysis, monitoring, and alerting.
  • Working knowledge of web application security concepts, including CSP, CORS, trusted domains, and OAuth flows.

Technologies

  • Salesforce
  • Splunk
  • SPL
  • Shield Platform Encryption
  • Multi-factor authentication (MFA)
  • Health Check
  • Event Monitoring
  • Cross-Origin Resource Sharing (CORS)
  • Content Security Policy (CSP)
  • OAuth
  • Connected Apps

Preferred

  • Salesforce Administrator (ADM 201) or a Salesforce security-related certification.
  • Security certifications such as CISSP, CISM, or similar.
  • Familiarity with NIST 800-53 security controls.
  • Experience supporting federal government clients or ATO processes.

Location: McLean, VA (onsite)

Similar Jobs