Senior (SMTS) Endpoint Security Software Engineer

The Experience

The Enterprise Security Technology team builds and operates highly scalable, fault-tolerant, distributed systems that deliver cloud-scale security infrastructure and software across multiple public cloud platforms and Salesforce's internal infrastructure. One of our key investments is in Endpoint Security, where we build a first-class security defense system for Salesforce's enterprise workloads.

As a Senior Endpoint Software Engineer, you develop, deploy, and operate automation, tools, and internal solutions that address the evolving threat landscape, working closely with architects, senior engineers, product managers, and partner teams.

The projects you take on range from building solutions from scratch to automating processes around existing vendor solutions, giving you broad exposure across development, security, and operational work.

What You'll Actually Be Doing

• Develop security solutions leveraging best development practices and modern tools and approaches.
• Utilize knowledge of enterprise security technologies like Extended Detection and Response (XDR), Vulnerability Management, Network Security, and Application Control in the design and development of solutions.
• Employ and leverage best security practices to implement software solutions in a large enterprise environment, following change management processes and procedures.
• Engage in threat modeling and participate in vendor evaluation.
• Assist in proof-of-concepts (PoCs) for new technologies that align with evolving security and business needs.
• Contribute to platform enhancements and design decisions.
• Support the definition and enforcement of policies, standard operating procedures (SOPs), and operational protocols for endpoint security tools by developing automation and related utilities.
• Help ensure endpoint hygiene meets or exceeds regulatory and compliance requirements.
• Design and actively participate in the implementation of robust automation pipelines, leveraging Python scripting, to reduce manual effort, enforce consistency, and support rapid incident response.
• Work closely with security engineers to contribute toward detection logic and response workflows, collaborating with Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), and telemetry teams to integrate and tune event ingestion, alerting, and remediation across multiple systems.
• Develop and maintain scripts and automation in Python to reduce manual operational effort, improve consistency of endpoint configurations, and support faster remediation and response workflows.
• Contribute to Continuous Integration and Continuous Deployment (CI/CD), infrastructure-as-code, and configuration-as-code efforts related to endpoint security services.
• Partner with Product Management throughout the entire project lifecycle, from initial design and vendor selection to implementation and ongoing operations, ensuring projects are delivered on time and with high quality.
• Develop and maintain comprehensive documentation for security services, policies, and procedures.
• Stay current with the latest threats and technologies in the cloud security and endpoint security landscape, actively seeking opportunities to innovate and improve our security posture.

You're Our Person If...

• You have 5+ years (Senior/SMTS) of hands-on security software development experience.
• You have experience developing automation used in a production environment at a scale of more than ten thousand endpoint systems.
• You have continuous hands-on experience with scripting or programming, such as Python or Go.
• You are familiar with Agile development practices and the secure software development lifecycle.
• You can perform proof-of-concepts (PoCs) for new technologies that align with evolving security and business needs.
• You have experience with formal change management processes in an enterprise environment.
• You can lead initiatives or support team goals in fast-paced environments.
• You have strong communication and collaboration skills.
• You are open to learning and adapting quickly, with a rapid innovation mindset.
• You can engage in threat modeling and participate in vendor evaluation.

Even Better If...

• You have direct experience integrating or operating endpoint protection, security firewall, email security, or exposure management platforms at enterprise scale.
• You have hands-on experience building detection content or automated response playbooks within a SIEM or SOAR platform.
• You have experience contributing to infrastructure-as-code or configuration-as-code pipelines in a security operations context.