Lead Security Engineer

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category
Software Engineering

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

• Platform Management and Vendor Relations: Serve as the primary technical point of contact for the SIEM platform. Manage vendor relationships, including coordinating new feature enablement, tracking bugs, and holding the vendor accountable for system stability and availability. Enforce a rigorous "safe change" process to achieve "zero manual changes" by routing all administrative actions through auditable, internal processes.
• Data Ingestion and Governance: Act as the "ultimate gatekeeper for the quality of data" within the NG-SIEM. Define and enforce strict SIEM ingestion requirements, including format and enrichment processes, to ensure high-quality, structured, and contextualized log data. Manage direct integrations from SaaS applications and other log sources, such as SQS and S3, to eliminate intermediate data hops and improve fidelity .
• Availability and Observability: Oversee the availability and performance of the vendor SAAS platform, with a target uptime of 99.9%. Build and maintain supporting services to monitor and alert on key metrics, including end-to-end log ingestion pipeline health, data freshness (targeting a maximum 5-minute latency), data ingestion rate, and deviation from ingestion time .
• Operational Excellence: Develop and implement services to automate platform changes and streamline processes, moving away from fragmented, manual tasks and over-reliance on "tribal knowledge".
• Continuous Improvement: Manage the full lifecycle of new feature enablement, from proof of concept and validation to controlled rollout . Participate in on-call duties for platform-related incidents, ensuring timely remediation and documenting corrective actions.
• Architectural and Design Leadership: Lead the team in making key architectural decisions and participate in design reviews to ensure that technical solutions are not only robust but also scalable for future growth. You will also conduct code reviews to enforce best practices and ensure the delivery of high-quality, production-ready features.
• Driving a Culture of Excellence: You will be responsible for defining and optimizing workflows and processes to improve efficiency and reduce waste across our security operations. This includes establishing a framework of standards and procedures and mentoring the team to continuously identify opportunities for improvement.

• Proven experience in a senior technical role (e.g., LMTS) managing and operating security platforms in a large-scale enterprise environment.
• Deep expertise with SIEM solutions, including direct, hands-on experience with CrowdStrike, Splunk, or Google Chronicle.
• Strong understanding of data pipelines, including log ingestion from various sources (APIs, SQS, S3, SaaS platforms).
• Experience with building observability services and monitoring key platform health metrics.
• Demonstrated ability to drive change and automate processes, reducing manual effort and improving operational efficiency.
• Experience with user access management and RBAC, particularly with SCIM-based access control.
• Excellent problem-solving, communication, and collaboration skills. The ability to work effectively with cross-functional teams and external vendors is essential.