Lead Security Automation Engineer

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Software Engineering

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword — it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place Agentforce is the future of AI, and you are the future of Salesforce.

Salesforce has one of the best Information Security teams in the world and growing this piece of the business is a top priority Trust and security are Salesforce's number one value as a company.  We are seeking a highly skilled and experienced Lead Member of Technical Staff (LMTS) to join our team and serve as the technical owner of the Security Information and Event Management platform. This role is pivotal in establishing the SIEM as the "secure, reliable, and efficient cornerstone" of our security operations. You will be responsible for fundamentally transforming our ability to rapidly detect, prioritize, and automate responses to high-fidelity security incidents by addressing current pain points such as fragmented operations, pervasive data quality issues, and high Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) metrics.  

The ideal candidate will have extensive hands-on experience in managing and operating large-scale enterprise security platforms, with a strong focus on data ingestion, system reliability, and automation. This is a strategic role that requires a blend of deep technical expertise, strong problem-solving skills, and the ability to drive change in a complex environment. A strong desire and demonstrated ability to apply transferable engineering skillsets to assist the broader team with other development needs as they arise. This includes the flexibility to step up and provide support in other engineering areas, helping to resolve roadblocks and contribute to the overall technical success of the organization

Key Responsibilities:

Platform Management and Vendor Relations: Serve as the primary technical point of contact for the SIEM platform.

Manage vendor relationships, including coordinating new feature enablement, tracking bugs, and holding the vendor accountable for system stability and availability.

Enforce a rigorous "safe change" process to achieve "zero manual changes" by routing all administrative actions through auditable, internal processes.  

Data Ingestion and Governance: Act as the "ultimate gatekeeper for the quality of data" within the NG-SIEM. Define and enforce strict SIEM ingestion requirements, including format and enrichment processes, to ensure high-quality, structured, and contextualized log data.

Manage direct integrations from SaaS applications and other log sources, such as SQS and S3, to eliminate intermediate data hops and improve fidelity .  

Availability and Observability: Oversee the availability and performance of the vendor SAAS platform, with a target uptime of 99.9%.

Build and maintain supporting services to monitor and alert on key metrics, including end-to-end log ingestion pipeline health, data freshness (targeting a maximum 5-minute latency), data ingestion rate, and deviation from ingestion time .  

Operational Excellence: Develop and implement services to automate platform changes and streamline processes, moving away from fragmented, manual tasks and over-reliance on "tribal knowledge".

Continuous Improvement: Manage the full lifecycle of new feature enablement, from proof of concept and validation to controlled rollout . Participate in on-call duties for platform-related incidents, ensuring timely remediation and documenting corrective actions.  

Architectural and Design Leadership: Lead the team in making key architectural decisions and participate in design reviews to ensure that technical solutions are not only robust but also scalable for future growth. You will also conduct code reviews to enforce best practices and ensure the delivery of high-quality, production-ready features.  

Driving a Culture of Excellence: You will be responsible for defining and optimizing workflows and processes to improve efficiency and reduce waste across our security operations. This includes establishing a framework of standards and procedures and mentoring the team to continuously identify opportunities for improvement. 

Required Skills and Qualifications:

Proven experience in a senior technical role (e.g., LMTS) managing and operating security platforms in a large-scale enterprise environment.

Deep expertise with SIEM solutions, including direct, hands-on experience with CrowdStrike, Splunk, or Google Chronicle.

Strong understanding of data pipelines, including log ingestion from various sources (APIs, SQS, S3, SaaS platforms).

Experience with building observability services and monitoring key platform health metrics.

Demonstrated ability to drive change and automate processes, reducing manual effort and improving operational efficiency.

Experience with user access management and RBAC, particularly with SCIM-based access control.

Unleash Your Potential

When you join Salesforce, you'll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we'll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what's possible — for yourself, for AI, and the world.

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that's inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.For California-based roles, the base salary hiring range for this position is $200,800 to $276,100.

---