Skip to content

Salesforce

Washington - Bellevue; Washington - Seattle and 3 more

Senior Platform Trust and Safety Engineer

Posted 12 days ago

Level
Senior
Experience
Not stated
Work style
Hybrid
Full-time
Pay
$148.5k to $223.9k

At a glance

The role in plain English

This role focuses on detecting, investigating, and mitigating abuse, fraud, and malicious activity across Salesforce platforms such as Core CRM and Marketing Cloud. It suits experienced security professionals with a background in platform abuse, incident response, or threat detection. Day-to-day tasks include triaging abuse reports, building detection rules, collaborating with legal and engineering teams, and maintaining response playbooks. The position may involve participating in an on-call rotation.

What you'll do

  • Review and triage internal and external abuse reports
  • Build and tune detection and response rules in Splunk
  • Author and maintain automated response playbooks
  • Collaborate with legal and engineering teams on regulatory reporting
  • Identify and document anti-abuse tooling requirements

What they're looking for

Essential

  • Experience in platform abuse, threat intelligence, or incident response
  • Ability to manage security investigations end to end
  • Specialisation in log analysis, forensics, or data mining
  • Experience authoring detection rules (e.g., YARA, Splunk SPL)
  • Related technical degree

Nice to have

  • Experience with threat intelligence tools
  • Familiarity with workflow automation platforms
  • Experience in customer-facing roles
  • Knowledge of cloud/SaaS security concepts

Core skills

  • Splunk
  • Threat detection
  • Incident response
  • Log analysis
  • Data mining
  • Detection engineering
  • Automation playbooks

The shape of the job

Technical depth

4/5

FoundationalSpecialist

Pace

3/5

SteadyFast-moving

Ownership

4/5

GuidedSelf-directed

Teamwork

4/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

How the pay compares

A little below similar roles

Compared with 68 open senior roles in the US on Cyberend that state their pay.

This role

$149k to $224k a year

  • This role
  • Typical range ($167k to $216k)

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe your process for triaging and investigating a suspected abuse case.
  2. 02How do you develop and tune detection rules in Splunk?
  3. 03Explain your experience collaborating with legal or compliance teams on regulatory reporting.
  4. 04What steps would you take to identify gaps in anti-abuse tooling?

About Salesforce

Salesforce provides cloud-based customer relationship management (CRM) platforms and related enterprise technology services.

Full job descriptionAs published by Salesforce

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Enterprise Technology & Infrastructure

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Salesforce's platforms — including Core CRM and Marketing Cloud — let companies build, deliver, monitor, and scale their engagement with customers globally. Not everyone uses that access responsibly. We're looking for a Platform Trust and Safety Engineer who is dedicated to identifying and stopping abusers who commit fraud, phishing, and account takeover, or who otherwise use our services to make the internet a hostile space.

The Platform Defense and Safety (PDS) team detects and responds to malicious user activity — misuse, abuse, fraud, and crime — that occurs even when our systems are working as designed. At any given time, bad actors attempt to bypass detection and response systems by posing as legitimate customers to take unfair advantage of our services. Unlike account compromise, abuse tends to be a slow, simmering problem rather than a single event.

The Experience

  • Extensive experience in information security roles involving platform abuse, threat intelligence, incident response, or threat detection
  • Experience managing security or abuse investigations end to end: triage, evidence collection, risk assessment, containment, escalation, and closure
  • Specialization in at least one of: log analysis, file-level forensics, or data mining
  • Experience authoring detection rules using languages such as YARA or Splunk SPL, and comfort working from a command line

What You'll Actually Be Doing

  • Review, triage, and respond to external and internal abuse reports across Core CRM and Marketing Cloud, with an eye toward expanding into new products
  • Build and tune detection and response rules in Splunk, and author and maintain automated response playbooks
  • Partner with our Office of Ethical Usage and Legal teams — including on regulatory reporting such as the EU Digital Services Act (DSA) — to keep our platforms free of malicious content
  • Identify and document anti-abuse tooling requirements for engineering teams, and evaluate third-party vendor tools to close detection gaps

You're Our Person If...

  • You track emerging trends in digital crime, merchant fraud, and abuse of AI/agentic capabilities
  • You write and maintain clear playbooks, SOPs, and postmortems that drive continuous improvement
  • You collaborate easily across teams — including Product Security Advisors, engineering, and product teams — and can contribute to platform abuse threat modeling
  • You're comfortable participating in an on-call rotation
  • A related technical degree required

Even Better If...

  • You can quickly and effectively understand someone else's code
  • You have extensive experience using Splunk for detection engineering and SPL rule authoring
  • You've worked with threat intelligence tools or teams
  • You have experience with workflow orchestration or automation platforms (e.g., Temporal)
  • You've worked in a customer-facing role (Support, Sales Engineering, etc.)
  • You're familiar with evidence handling, privacy, data retention, and regulatory considerations relevant to security investigations
  • You understand cloud/SaaS security concepts, multi-tenant platforms, identity systems, and application telemetry
  • You have experience analyzing large, complex data sets, and familiarity with Git/GitHub and the Salesforce platform (Cases, SOQL)

Unleash Your Potential

When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best , and our AI agents accelerate your impact so you can do your best . Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.

Accommodations

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form .

Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.

At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.

The typical base salary range for this position is $148,500 - $223,900 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $178,900 - $246,000 annually.

The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.

  • Salesforce

    Posted 3 days ago

    Lead Product Security Engineer

    Ireland - Dublin; Ireland · On-site

    Lead secure development practices, threat modeling, and architecture reviews for Salesforce product teams. Requires expertise in application security, code review, and advising engineering leaders, with experience in Java, C, and cloud security.

    SeniorThreat modellingCode reviewCloud security
  • California - San Francisco and 2 more · Hybrid · $257.5k to $451.7k

    Lead the product security engineering vision, strategy, and operations for Salesforce's customer-facing products, partnering with security and engineering executives. Requires experience building and scaling product security programs at large enterprise technology companies.

    LeadershipProduct securityCloud securityRisk management
  • Texas - Dallas and 7 more · Hybrid · $197.3k to $313.7k

    Lead a team of Security Partners as the Business Information Security Officer for major business units, acting as the primary security advisor to senior technical and business leaders. Requires technical leadership experience and the ability to influence architecture and controls.

    LeadershipRisk managementCloud securityApplication security
  • US - Remote · $230.4k to $500k

    Lead and conduct complex security investigations involving internal and external threats, including technical analysis of hardware, software, and supply chain risks. Requires a technical background and experience with multi-domain security cases.

    SeniorThreat huntingDigital forensicsSIEM

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

Free beginner roadmap PDF when you join · No spam · Unsubscribe anytime