Software Engineering SMTS

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Software Engineering

Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.

Job Post : Software Engineering Role (Senior/Lead)
Location - San Francisco - CA or Bellevue -WA
 

The Security team is looking for an experienced software developer to design and build a highly scalable and available cloud platform-as-a-service (PaaS) for performing automated code and package security analysis. This platform will integrate with innovative technologies for static/dynamic application security testing (SAST/DAST), as well as open source software security scanners. You will build a critical piece of our release pipelines while also helping engineers identify security flaws in their code through a cloud PaaS. Your system will support both internal as well as external software packages that run in the Salesforce ecosystem, providing significant outreach and business impact.

This is a great opportunity for high-reaching engineers who want technical growth in both distributed systems development and application security vulnerabilities, while operating on a large scale cloud platform.

Responsibilities

• Architect and implement software platforms to provide automated static/dynamic application security testing to Salesforce’s public and private software components.
• Architect and implement software platforms integrated with open source and commercial software security scanners to provide automated discovery, validation and access to security flaw analysis
• Integrate these platforms with Salesforce’s public and internal code management pipelines.
• Advance and operate these security scanning platforms in a full DevOps model
• Work with security engineers to build software systems for risk assessment, threat modeling and fixing vulnerabilities based on security scanners results
• Operate in an Agile development environment, including participating in daily scrums
• Support the team’s engineering excellence by performing code reviews and mentoring junior team members
• Work with Infrastructure customers and security engineers to build and advance the team’s product portfolio

Skills/Experience

• Industry experience. 5+ years, including:
• 3+ years experience in SaaS, PaaS or IaaS software development
• 3+ years experience in a high-availability 24/7 environment (cloud platforms are a plus)
• Education. Bachelor or Master Degree in Computer Science or a related technical field.
• Solid understanding of Computer Science fundamentals like object-oriented design, data structures, algorithm design, problem-solving, and complexity analysis.
• Full Stack Software Development experience in large scale critically important applications.
• Experience with cloud platforms such as AWS, Azure or GCP
• Experience with Containers and Container Orchestration systems (such as Kubernetes, Docker Swarm, etc)
• Experience and deep understanding of at least one open-source distributed system (such as Airflow, RabbitMQ, Kafka, Redis, Elasticsearch, Cassandra, etc.)
• Experience in working on data sources like Postgres, MySQL, DynamoDB, Redis, ElasticSearch or similar.
• Programming. Proficiency in object-oriented and multi-threaded programming in at least one of the following languages: Golang, Java, C++, Python, C# (Combination of Java and GoLang is an advantage)
• Software design. Demonstrated expertise in applying systems patterns (e.g., Client-server, N-tier, Master/Slave, MVC) and API constructions (e.g., Swagger, OpenAPI)

Security Skills

• Strong knowledge in security fundamentals: authentication/authorization frameworks (e.g., SSO, SAML, Oauth), secure transport (e.g., SSL, TLS), identity management (e.g., certificates, PKI), code signing.
• Interested in innovation and ideation. Contribute to development of new products by building quick POCs and converting ideas into real products.
• DevOps mindset and strong ownership over owned code (test, monitor, deploy, maintain)
• Excellent communication, analytical and problem-solving skills.
• Team. Ability to value team success beyond personal contributions