Marketing Security Lead

Marketing Security Lead

Are you a security professional passionate about translating technical controls into balanced guidance for a diverse workforce of humans and AI? Are you inspired by innovating pragmatic solutions for security challenges across a broad range of Marketing infrastructure, platforms and products? Do you get excited about enabling an effective security controls at scale?

Marketing Security secures our Marketing environment that generates a revenue pipeline for Salesforce. In this role, you will partner closely with marketing architects, engineers, product managers to understand their objectives, identify threats, and scale our Marketing security programs. You will collaborate with our IT and Enterprise Security organizations and champion security requirements in the selection, development, and integration of a wide range of technologies. You will also have the opportunity to identify emerging threats and design new processes that balance security and business agility across for the Chief Marketing Office.

At Salesforce Trust is our #1 value. We are looking for a team player who can contribute and grow alongside an established and experienced team of technical security professionals. Are you interested in becoming part of an innovative, business-centric security team that focuses on preventing and remediating risk to the Marketing organization?

Your Impact - Responsibilities:

• Threat model common attacker methods to develop appropriate mitigation techniques.
• Collaborate with engineering teams and business partners to drive solutions through a secure development lifecycle.
• Perform full stack security assessments of a diverse and complex range of environments including:
• Operating system and hardware platforms (server and client endpoints, mobile and other embedded devices)
• Network infrastructure (switches, routers, wireless access points, load balancers, firewalls, VPN, SDN, cloud)
• Authentication and authorization services (SAML, OAuth, Radius, Kerberos)
• Public cloud infrastructure platforms and technologies (AWS, GCP, Azure, Terraform)
• Securing Web Applications, SaaS pentesting
• Code Reviews and SDLC
• Security Architecture Design Reviews
• Research new technologies, emerging threats, and vulnerabilities.

Minimum Qualifications:

• Bachelor's Degree in Computer Science, Engineering, or related technical field, or equivalent experience in technical leadership
• 8+ years experience in one of the following security roles: security operations, security engineering, incident response, penetration testing, intrusion detection, network security, application security, identity management, cryptography, or endpoint security controls.
• Understanding major Security domains:
• Common network security models and protocols.
• Methods of determining integrity and providing confidentiality.
• Operating systems internals and vulnerabilities.
• Exploit mitigation techniques.
• Application security.
• Excellent communication skills with experience providing advice to internal customers on risk assessment, threat modeling, and remediation of vulnerabilities.
• Ability to distill complex technical information verbally during situation reports and briefings.
• Proven project management and organizational skills.
• Excellent analytical skills, organizational skills, ingenuity, and the ability to work as part of a team.

Preferred Qualifications:

• Hands-on experience designing solutions or performing security testing of cloud environments (AWS, Azure, Google Cloud)
• Strong working experience with common security assessment tools such as BurpSuite, Nexpose, Nessus, Metasploit, Nmap
• Understanding relevant scripting languages: Bash, Powershell, Python, Java, JavaScript / NodeJS. Experience with DevOps, CI/CD pipelines, or secure development lifecycles.
• At least one security related certification such as OSCP, GCIH, GCIA, GPEN, GWAPT, GMOB, GPPA, CCNP, CCNP Security, CCIE Security
• Experience performing detailed network traffic analysis, architecture review, and engineering network security solutions
• Experience writing security white papers and/or presenting at industry security conferences and events.
• Strong understanding of encryption methods

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that's inclusive, and free from discrimination. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: salesforcebenefits.com.