Salesforce Security Engineer

Steampunk is hiring a Salesforce Security Engineer to serve as the primary security point of contact across the Salesforce environment.

Responsibilities

• Design, implement, and audit Salesforce access controls including profiles, permission sets, roles, sharing rules, and field-level security, using least-privilege principles across all user populations.
• Run periodic access reviews and recertifications to find and remediate overly permissive or outdated entitlements.
• Configure and maintain Salesforce security controls in the Setup Menu, including session settings, login IP restrictions, password policies, MFA enforcement, Health Check, Shield Platform Encryption, and Event Monitoring.
• Build and maintain Splunk queries and dashboards for monitoring Salesforce login events, permission changes, and anomalous access patterns; use log analysis to support incident investigation.
• Assess and harden security for Salesforce Connected Apps, focusing on internet-facing settings such as CORS, CSP, Trusted URLs, OAuth/Connected App policies, and session security.
• Support ISSO activities by assisting application security efforts and collecting required security artifacts for assessment and authorization.
• Coordinate with system owners and compliance teams to ensure configurations align with federal security requirements (including NIST 800-53 and FedRAMP, as applicable).
• Document security configurations, findings, and remediation actions for audit and ATO support.
• Review and provision privileged user access.

Requirements

• Ability to obtain and maintain a U.S. Government security clearance.
• Bachelor’s degree.
• 8–10 years of experience in Salesforce administration or security engineering.
• Strong knowledge of Salesforce access control models: profiles, permission sets, roles, and sharing rules, with demonstrated least-privilege implementation.
• Extensive experience configuring Salesforce Setup Menu security settings, including session security, login policies, Health Check, Event Monitoring, and Shield.
• Proficiency writing Splunk SPL for log analysis, monitoring, and alerting.
• Working knowledge of web application security concepts, including CSP, CORS, trusted domains, and OAuth flows.

Technologies

• Salesforce
• Splunk
• SPL
• Shield Platform Encryption
• Multi-factor authentication (MFA)
• Health Check
• Event Monitoring
• Cross-Origin Resource Sharing (CORS)
• Content Security Policy (CSP)
• OAuth
• Connected Apps

Preferred

• Salesforce Administrator (ADM 201) or a Salesforce security-related certification.
• Security certifications such as CISSP, CISM, or similar.
• Familiarity with NIST 800-53 security controls.
• Experience supporting federal government clients or ATO processes.

Location: McLean, VA (onsite)