Lead Full Stack Security (Systems & Software) Engineering (GRC)
Salesforce4 days ago
Base Salary
$173k - $260k/yr
Responsibilities
- Own architecture, technical roadmaps, specifications, planning, and execution for complex multi-system GRC platform initiatives.
- Design resilient cloud-native microservices for compliance telemetry, automated evidence ingestion, policy and compliance evaluation, and low-latency risk analysis.
- Translate business, regulatory, security, and GRC strategies into technical roadmaps, milestones, and execution plans.
- Set engineering standards, conduct code and architecture reviews, enforce secure coding practices, and establish CI/CD and testing benchmarks.
- Build policy-as-code and compliance-as-code engines using OPA or comparable evaluation frameworks and integrate CSPM and EDR platforms.
- Lead automated evidence collection pipelines across AWS, Azure, GCP, identity providers, enterprise security tools, CI/CD pipelines, ticketing systems, Workday, and NetSuite.
- Build auditing interfaces and risk analysis engines that map technical evidence to NIST SP 800-53, ISO 27001, and SOC 2.
- Lead adoption of AI coding assistants and evaluate human- and AI-generated code for correctness, quality, security, and performance.
- Mentor senior and mid-level engineers and lead cross-functional technical alignment across distributed, asynchronous teams.
Requirements
- 10 to 12+ years of professional full-stack software and systems engineering experience, including 3+ years leading technical projects and distributed engineering teams in a Lead, Staff, or Principal capacity.
- Proven experience taking SaaS platforms or enterprise software projects from architectural inception through production delivery.
- Deep expertise in Python and Java, including FastAPI, Django, Flask, Spring Boot, and microservice design patterns.
- Advanced proficiency with JavaScript or TypeScript frameworks such as React, Vue, or Angular, including scalable component libraries and complex data visualization dashboards.
- Strong expertise with PostgreSQL, MySQL, NoSQL and graph databases, distributed data processing, Docker, Kubernetes, and AWS, Azure, or GCP.
- Working knowledge of NIST SP 800-53, ISO/IEC 27001, and SOC 2 Trust Services Criteria.
- Experience building systems for continuous control monitoring, automated audit trails, or policy engine evaluation, including OPA and Rego.
- Experience using AI development tools such as Claude Code, GitHub Copilot, Codex, and Cursor, with a strategic vision for AI integration.
- Advanced prompt engineering skills and the ability to create reliable, secure, production-ready system context for AI outputs.
- A related technical degree is required.
- Preferred experience includes commercial GRC, SIEM, or CSPM systems; OPA at scale; CISSP, CCSP, or cloud security certifications; and Salesforce platform technologies including Lightning Web Components, Apex, and SOQL.
Benefits
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Salesforce provides reasonable accommodations during the application and recruiting process.
Tech Stack
AngularAWSAzureDjangoDockerFastAPIFlaskGoogle Cloud PlatformJavaJavaScriptKubernetesMySQLPostgreSQLPythonReactSpring BootTypeScriptVue.js
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.