Salesforce Security Engineer

Salesforce Security Engineer
Salary : £85,000
Locations:

Leeds, Manchester, Redhill, Tunbridge Wells, Bournemouth, or Bristol (Hybrid/Flexible)
We're looking for a

Salesforce Security Engineer

who brings strong engineering fundamentals and hands-on experience to the intersection of

Salesforce development and security engineering .
You'll play a critical role in enhancing the security posture of our Salesforce platform-contributing directly to secure code practices, threat modelling, and security testing across our CI/CD pipeline.
This role is ideal for someone with

engineering roots

who has evolved into the security space and is passionate about improving security maturity in modern DevSecOps environments.
What You'll Do
Lead and contribute to the

security engineering

of our Salesforce platform especially in the context of

APEX code , API design, and secure development lifecycle.
Apply the

DSOMM (DevSecOps Maturity Model)

and OWASP security principles to assess and uplift Salesforce security maturity.
Own and improve

pipeline security

including static code analysis (SAST), dynamic application security testing (DAST), dependency checks, and secure deployment patterns.
Conduct

threat modelling

for Salesforce-based estates, identifying and mitigating risks early in the development lifecycle.
Perform and refine security tests across APIs and applications within the Salesforce environment.
Work collaboratively with platform engineers, developers, and the broader infosec team to

embed security by design .
Advise on approaches to

code signing, policy enforcement, and change validation

in a distributed Salesforce landscape.
Explore and address the unique challenges of securing a

Salesforce-first architecture , integrated across the broader estate.
What You Bring
Hands-on experience with

Salesforce development

(particularly APEX) and a deep understanding of how engineering and security intersect.
Strong grasp of secure coding practices and experience running

DAST/SAST

on Salesforce environments.
Exposure to or working knowledge of

DSOMM , OWASP, and threat modelling methodologies.
Experience integrating

security into CI/CD pipelines , especially in complex enterprise platforms.
Ability to approach platform security from an

engineering-first mindset , not just compliance.
Confident communicator who can translate technical security needs into engineering requirements.
If you're ready to play a key role in a transformative digital journey and have the expertise to lead high-performing engineering teams, we'd love to hear from you! Click "Apply" Or Email

#J-18808-Ljbffr