Apply on Employer Site

Salesforce · 17 hours ago

Lead Security Engineer, GovCloud

Virginia - Herndon

Full-time

Hybrid

Senior Level, Lead/Staff

$172K/yr - $260K/yr

5+ years exp

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. They are seeking a Lead Security Engineer for Government Cloud Services to drive the overall security posture of the organization, assess risks, implement security measures, and respond to security incidents.

Agentic AIArtificial Intelligence (AI)Cloud ComputingCRMSaaSSales EnablementSoftware

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Apply security policies to meet security objectives of the system

Assess adequate access controls based on principles of least privilege and need-to-know

Assess all the configuration management (change configuration/release management) processes

Assess the effectiveness of security controls

Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level

Develop and implement comprehensive security policies, procedures, and guidelines to ensure the protection of company assets and compliance with applicable regulations

Conduct (or coordinate with third party partners) regular security risk assessments, vulnerability assessments, and penetration tests to identify potential weaknesses in systems, networks, and applications and coordinate remediation of findings. Drive related mitigations

Collaborate with stakeholders to design and implement security controls, including firewalls, intrusion detection systems, access controls, and encryption technologies

Conduct analysis of logs and events, identify gaps for deeper analysis as needed, and coordinate with Detection and Response teams on detection and alerting betterment efforts and uplift

Stay up-to-date with the latest security trends, vulnerabilities, and threat intelligence, and provide recommendations to proactively address emerging risks

Liaison with Incident Response teams on incidents and response efforts, recommend and/or instigate remediation actions to prevent future occurrences

Develop and deliver security awareness and training programs to educate employees on security best practices and promote a culture of security across the organization

Collaborate with external vendors, partners, and auditors to ensure compliance with security standards and regulations. Further, implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation

Maintain documentation of security procedures, incident response plans, and security incident reports

Qualification

Cloud Infrastructure as CodeCISSP CertificationSecurity FrameworksVulnerability AssessmentIncident ResponseLog AnalysisSecurity TechnologiesPenetration TestingAnalytical SkillsCommunication SkillsLeadership Skills

Required

Experience with using cloud infrastructure as code (IaC), including Terraform, CloudFormation, or Azure Resource Manager to deploy secure cloud infrastructure, and using version control based on Git

Professional certifications such as CISSP, CISM, CEH, or similar are highly desirable

Proven experience (5+ years) in a security analyst role, with a focus on information security, incident response, and vulnerability management

Must be US Citizen operating on US Soil and pass both enhanced background check as long as Criminal Justice background check

Strong understanding of security frameworks such as ISO 27001, NIST, or CIS Controls, and their practical application

Extensive knowledge of security technologies, including firewalls, IDS/IPS, SIEM, DLP, antivirus, and endpoint protection systems

Hands-on experience with vulnerability assessment tools, network scanning tools, and penetration testing methodologies

Proficiency in log analysis, incident response, and forensic investigation techniques

Excellent communication skills, both written and verbal, with the ability to articulate complex security concepts to technical and non-technical stakeholders

Demonstrated leadership abilities, with the capacity to motivate and inspire a team

Strong analytical and problem-solving skills, with the ability to think strategically and develop innovative solutions to security challenges