Senior Endpoint Security Engineer (SMTS)

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job CategorySoftware Engineering Job Details About SalesforceSalesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce. About the team:The Enterprise Security Technology team builds and operates highly scalable, fault-tolerant, distributed systems to deliver cloud-scale security infrastructure & software across multiple public cloud platforms and Salesforce's internal infrastructure.One of our key investments is in the area of Endpoint Security focusing on building a first class security defense system for Salesforce's Enterprise workloads. About the position:We are seeking an Endpoint Security Engineer who will contribute to the architecture, strategy, and execution of endpoint security across the enterprise. You will help ensure the resilience, scalability, and integrity of endpoint defense mechanisms in support of the overall security posture. Your primary focus will be to implement a consistent, risk-based, and standards-aligned approach to Endpoint Security, thereby configuring the Enterprise endpoints used on Salesforce networks, systems, and services so that they are able to adequately protect against threats that impact the confidentiality, integrity, and availability of Salesforce. This is a hands-on technical role where you will contribute to implementing new services and adapting existing ones to meet the evolving needs of our business. You'll be a part of a broader team with responsibilities across the full spectrum of endpoint security, including endpoint hardening, malware and virus detection, application blocklisting, Endpoint Detection and Response (EDR), vulnerability scanning and cloud security posture management (CSPM). Your expertise will be instrumental in developing other services that leverage offerings from leading security vendors. Responsibilities: * Support Endpoint Security Strategy & Architecture * Contribute to defining the long-term technical roadmap for endpoint protection, including tools like CrowdStrike, EDR, Application Control, Vulnerability Scanning, etc. * Assist in Deployments & Coverage * Help ensure Enterprise-wide deployment of endpoint security tools, achieving high coverage by aligning tool capabilities to the enterprise device inventory (including rollout of agents across macOS, Windows, Linux, and mobile platforms). * Maintain Governance & Compliance * Support the definition and enforcement of policies, SOPs, and operational protocols for endpoint security tools. Help ensure that endpoint hygiene meets or exceeds regulatory and compliance requirements. * Contribute to Automation & Resilience * Assist in the design of robust automation pipelines-leveraging scripting-to reduce manual effort, enforce consistency, and support rapid incident response. * Enhance Detection & Response Posture * Contribute to architecting rigorous detection logic and response workflows, collaborate with SIEM, SOAR, and telemetry teams to integrate and tune event ingestion, alerting, and remediation across multiple systems. * Innovate Security through Design * Engage in threat modeling, vendor evaluation, and platform enhancements; assist in proof-of-concepts (PoCs) for new technologies that align with evolving security a