Team Description

Security Assurance team works alongside Salesforce Product teams in secure design and security assessment of Salesforce's products.

Responsibilities

Your role will be to work side by side with teams throughout the company to solve challenging security design problems and provide feedback on proposed systems and architectures. The associate will work alongside us as a team and may perform one or more of the following tasks:

• Perform security architecture, design, and component reviews for Salesforce infrastructure

• Perform black-box penetration testing and code reviews on a variety of tooling that will be introduced into Salesforce's infrastructure

• Participate in vulnerability assessment and remediation efforts

• Help triage incoming work according to impact, risk, and urgency

• Document and communicate discovered issues; work with teams to resolve them in a manner which improves security and encourages agility

• Provide security guidance and oversight to engineering and operational teams by participating in design reviews and threat modeling

• Research new security technologies and build new tools where necessary to simplify security testing and discovery activities.

Minimum Qualifications

• Programming in Java, PHP, Perl, Python, Ruby, or other relevant languages.

• Understanding of general application security concepts

Preferred Qualifications

• Familiarity with OWASP Top Ten

• Participated in Bug Bounties and Security Competitions

• Active participation in the security community.

• Bonus points if you've written blog posts and or presented at security conferences -- we'd love to read them.