Salesforce Security Engineer/Lead

Must be a currently certified information security professional possessing one (1) or more of the following credentials (SSCP, GIAC GCUX, GSEC, GCED, GCIH, GCIA, or other equivalent certification.)

Four (4) years of experience managing and/or enforcing security compliance standards and regulations (e.g., ISO 27001, PCI, SOC, FISMA, FedRAMP, HIPAA, GDPR, or equivalent industry standard) at an enterprise level.

Two (2) years of experience securing Salesforce applications.

Four (4) years of experience authentication/authorization frameworks (e.g., SSO, SAML, OAuth, etc.).

Three (3) years of experience with secure transport protocols (e.g., SSL, TLS).

Three (3) years of experience with identity and access management (e.g., IDAM solutions, certificates, PKI).

Two (2) years of prior experience in vulnerability management and its related processes and procedures within a Salesforce application environment.

One (1) year of experience with web application programming (i.e., JavaScript, SQL, etc.) and familiarity with OWASP secure coding practices.

Two (2) years of experience in vulnerability management and its related processes and procedures, utilizing multiple vulnerability scan tools for both Cloud and On-Prem scenarios (Qualys, Nessus, Rapid7, Cloudaware, Redlock, Whitehat, Burp Suite, Netsparker, etc.).