Description

About the team

The Enterprise Security Technology team builds and operates highly scalable, fault-tolerant, distributed systems to deliver cloud-scale security infrastructure & software across multiple public cloud platforms and Salesforce’s internal infrastructure.

One of our key investments is in the area of Endpoint Security focusing on building a first class security defense system for Salesforce’s Enterprise workloads.

About the position

We are seeking a Senior/Lead Endpoint Security Engineer (Developer) to help implement, automate, operate, and continuously improve endpoint security capabilities across the enterprise.

In this role, you will work hands-on with CrowdStrike to help ensure Salesforce endpoints are protected against threats impacting the confidentiality, integrity, and availability of enterprise systems. You will contribute to delivering a consistent, risk-based, and standards-aligned endpoint security posture, supporting endpoints across macOS, Windows, Linux, and mobile platforms.

This is a hands-on engineering role focused on execution, reliability, and scale. You will collaborate closely with architects, senior engineers, product managers, and partner teams to deploy and operate endpoint security solutions, automate workflows, and improve detection and response capabilities as the environment evolves.

You'll be a part of a broader team with deployment, automation and operational responsibilities across the full spectrum of endpoint security, including endpoint hardening, malware and virus detection, SaaS Security Posture Management (SSPM), Identity Protection (IDP) and other CrowdStrike capabilities.

Responsibilities:

• Develop and support endpoint security using CrowdStrike across:

• Endpoint Detection & Response (EDR)

• SSPM

• Vulnerability scanning and posture management CrowdStrike EM/VM module

• Identity Protection

• Build Deployment Automation

• Help ensure Enterprise-wide deployment of endpoint security tools, achieving high coverage by aligning tool capabilities to the enterprise device inventory (including rollout of agents across macOS, Windows, Linux, and mobile platforms).

• PoC & Design Responsibilities

• Engage in threat modeling and participate in vendor evaluation

• Assist in proof-of-concepts (PoCs) for new technologies that align with evolving security and business needs

• Contribute to platform enhancements and design decisions

• Maintain Governance & Compliance

• Support the definition and enforcement of policies, SOPs, and operational protocols for endpoint security tools by developing automation and related utilities. Help ensure that endpoint hygiene meets or exceeds regulatory and compliance requirements.

• Contribute to Automation & Resilience

• Design and actively participate in the implementation of robust automation pipelines—leveraging scripting (Python) —to reduce manual effort, enforce consistency, and support rapid incident response.

• Enhance Detection & Response Posture

• Work closely with security engineers contributing towards the detection logic & response workflows, collaborate with SIEM, SOAR, and telemetry teams to integrate and tune event ingestion, alerting, and remediation across multiple systems.

• Develop and maintain scripts (Python) and automation to:

• Reduce manual operational effort

• Improve consistency of endpoint configurations

• Support faster remediation and response workflows

• Contribute to CI/CD, infrastructure-as-code and configuration-as code efforts related to endpoint security services.

• Partner with Product Management throughout the entire project lifecycle, from initial design and vendor selection to implementation and ongoing operations, ensuring projects are delivered on time and with high quality.

• Develop and maintain comprehensive documentation for security services, policies, and procedures.

• Stay current with the latest threats and technologies in the cloud security and endpoint security landscape, actively seeking opportunities to innovate and improve our security posture.

Required Skills/Experience:

Sr./Lead leveling will be determined by skills/experience and performance in the interview process

• 5+ years of software development experience in the security space

• 3-5+ years of hands-on security engineering/development using CrowdStrike.

• Experience developing automation used in a production environment at scale of more than a thousand endpoint systems.

• Continuous hands-on experience with scripting or programming (Python, Go, or similar).

• Familiarity with Agile development practices and the software development lifecycle.

• Ability to perform proof-of-concepts (PoCs) for new technologies that align with evolving security and business needs

• Ability to engage in threat modeling and participate in vendor evaluation

• Experience with the formal change management process in the enterprise environment.

• A related technical degree required.

For roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.