Security Analyst/Engineer

We are seeking an experienced Security Analyst / Engineer to support the security posture of the Salesforce Service Cloud (SFSC) platform. The role will focus on vulnerability management, incident response, application security, security remediation, and coordination with internal security teams and external vendors.

Key Responsibilities

· Triage and prioritize security vulnerabilities identified through internal security scans.

· Assess vulnerabilities based on severity, exploitability, and business impact, and drive remediation activities.

· Plan and coordinate security patches and hotfixes with application and engineering teams..

· Lead and support security incident response, including investigation, remediation, documentation, and post-incident review.

· Coordinate penetration testing activities with internal security teams and external security vendors.

· Support security assessments and provide application security guidance for Salesforce Service Cloud changes.

· Work closely with security and engineering teams on exploit assessment and remediation planning.

· Maintain security documentation and provide visibility into vulnerabilities, incidents, and remediation status.

· Proactively identify security risks and recommend improvements to strengthen the overall security posture.

Required Qualifications

· 5+ years of experience in Cybersecurity, Application Security, Security Engineering, or Vulnerability Management.

· Strong experience in Vulnerability Management and Security Incident Response.

· Hands-on experience with security scanning, vulnerability triage, risk assessment, and remediation.

· Experience coordinating penetration testing and security assessments.

· Strong understanding of Application Security principles and security risk management.

· Experience collaborating with internal security teams, application/engineering teams, and external security vendors.

· Strong analytical, communication, documentation, and problem-solving skills.

Preferred Qualifications

· Experience with Salesforce Service Cloud / Salesforce security.

· Knowledge of OWASP and common application security vulnerabilities.

· Experience with enterprise security scanning, vulnerability management, or SIEM tools.

· Relevant security certifications such as Security+, CySA+, CEH, GSEC, or CISSP are a plus.

Application security depth (SAST/DAST/SCA, API, code review, threat modeling)