Salesforce · 7 hours ago
Enterprise Application Security Engineer (pen testing)
California - San Francisco
Full-time
Hybrid
Entry, Mid Level
$117K/yr - $177K/yr
2+ years expSalesforce is the #1 AI CRM, committed to driving innovation and customer success. The Enterprise Application Security Engineer will perform security assessments, collaborate with engineering teams, and develop security standards to protect Salesforce's enterprise environment.
Agentic AIArtificial Intelligence (AI)Cloud ComputingCRMSaaSSales EnablementSoftware
Responsibilities
Perform full stack security assessments (such as architecture and design reviews, code reviews, and penetration tests) across a diverse and sophisticated range of environments including:
Web applications/SaaS applications
Operating system and hardware platforms (server and client endpoints, mobile and other embedded devices)
Network infrastructure (switches, routers, wireless access points, load balancers, firewalls, VPN, SDN, cloud)
Authentication and authorization services (SAML, OAuth, Radius, Kerberos)
Public cloud infrastructure platforms and technologies (AWS, GCP, Azure, Terraform)
Middleware and API services
Threat model common attacker methods to develop appropriate mitigation techniques, providing guidance that balances security requirements with functional requirements
Develop automated processes and support improvement of tooling to identify and solve problems at scale
Collaborate with engineering teams and business partners to drive solutions through a secure development lifecycle
Define and develop technical security standards and guidelines with business partners
Research new technologies, emerging threats, and vulnerabilities for strategic planning and process improvements
Qualification
Required
2-4 years of experience in a security role with a focus on application and network security, penetration testing, security engineering, infrastructure engineering, threat modeling, red team operations, firewall/access control technologies, risk management, and/or endpoint security controls
Knowledge of key areas pertaining to security such as common network security models and protocols, application security, methods of resolving integrity and providing confidentiality, operating systems internals and vulnerabilities, public key infrastructure and digital certificates, and exploit mitigation techniques
Hands-on experience performing security assessments with common tools such as BurpSuite, Nexpose, Nessus, Metasploit, and Nmap
Experience performing manual and tool-assisted code reviews (Java, JavaScript, Python, and other languages)
Experience designing solutions and/or performing security assessments in cloud environments (AWS, Azure, Google Cloud)
Excellent communication skills, with the ability to work as a team and collaborate effectively with diverse stakeholders
Preferred
Confirmed scripting experience in one or more of these languages: Bash, PowerShell, Python, Java, JavaScript / NodeJS
Security certification such as OSCP, OSEP, GCIH, GCIA, GPEN, GWAPT, GMOB, GPPA, CCNP, CCNP Security, CCIE Security
Knowledge of development and security practices on the Salesforce platform, Heroku, Slack, Mulesoft, and/or Tableau
Benefits
Time off programs
Medical
Dental
Vision
Mental health support
Paid parental leave
Life and disability insurance
401(k)
Employee stock purchasing program
Company
Salesforce
Salesforce is a cloud-based software company that provides customer relationship management software and applications.
10001+ employees
H1B Sponsorship
Salesforce has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (1883)
2024 (2296)
2023 (1850)
2022 (2849)
2021 (2124)
2020 (1960)
Funding
Current Stage
Public CompanyTotal Funding
$65.38MKey Investors
Starboard ValueEmergence CapitalHalsey Minor
2022-10-18Post Ipo Equity
2004-06-23IPO
2003-01-01Series Unknown· $1M
Leadership Team
Arundhati Bhattacharya
Chairman & Ceo Salesforce India
Kendall Collins
CEO, GovCloud - Salesforce
Recent News
2026-01-25
Dallas Morning News
2026-01-25
2026-01-24
Company data provided by crunchbase