Salesforce Security Architect

CyberOne LLC is seeking an experienced Salesforce Security Architect / Security Consultant for a two-month security assessment engagement.

We are looking for a professional with strong hands-on Salesforce architecture experience and a proven track record of conducting comprehensive Salesforce security assessments.

This is a security assessment engagement, not a Salesforce development or implementation role.

Key Responsibilities

Conduct a comprehensive security assessment of the Salesforce environment.

Review Salesforce security architecture, configurations, and security controls.

Assess user permissions, profiles, permission sets, roles, sharing rules, and record-level access.

Evaluate authentication, MFA, SSO, session management, and access restrictions.

Identify excessive privileges, unauthorized data exposure, and potential data leakage risks.

Review Salesforce APIs, connected apps, integrations, and OAuth security.

Assess Salesforce data export, file sharing, public links, and external access controls.

Review Apex, Visualforce, Lightning components, and customizations for security weaknesses, where applicable.

Identify configuration weaknesses, business logic vulnerabilities, and security gaps.

Provide risk ratings, supporting evidence, and actionable remediation recommendations.

Collaborate with security stakeholders and Salesforce administrators to validate findings.

8+ years of Salesforce platform experience, preferably in architecture or security-focused roles.

Strong understanding of Salesforce security architecture and enterprise security controls.

Prior hands-on experience conducting Salesforce security audits or penetration testing is mandatory.

Deep knowledge of Salesforce access controls, sharing models, integrations, and data security.

Experience identifying Salesforce misconfigurations and business logic security issues.

Ability to independently conduct assessments and deliver professional security reports.

Strong communication and documentation skills.

Preferred Qualifications

Salesforce Certified Application Architect, System Architect, or Technical Architect.

Salesforce Platform Security experience.

Experience with Salesforce Shield, Event Monitoring, and Security Center.

Familiarity with OWASP, NIST, and enterprise security assessment methodologies.

Experience assessing Salesforce environments handling sensitive or regulated data.

Expected Deliverables

Salesforce security architecture and configuration assessment.

Documented security findings with severity and supporting evidence.

Risk-based remediation recommendations.

Final security assessment report and stakeholder walkthrough.