This job listing has expired and the position may no longer be open for hire.

Threat & Vulnerability Management Engineer at Salesforce.com

Posted in Other 30+ days ago.

This job brought to you by America's Job Exchange

Type: Full Time
Location: Bellevue, Washington





Job Description:

JOB CATEGORY

Products and Technology

JOB DETAILS

SALESFORCE IS LOOKING TO GROW OUR EXPANDING THREAT AND VULNERABILITY MANAGEMENT TEAM. THE THREAT AND VULNERABILITY MANAGEMENT TEAM IS RESPONSIBLE FOR HELPING ENSURE THAT SALESFORCE BECOMES THE MOST SECURE AND COMPLIANT ENTERPRISE CLOUD SOLUTION. AS A VULNERABILITY MANAGEMENT ENGINEER FOCUSING ON THE GOVERNMENT CLOUD, YOU WILL WORK WITH VARIOUS TEAMS, APP. OWNERS, AND SHOULD HAVE AN UNDERSTANDING OF UNIX/LINUX. WORKING WITH MULTIPLE TEAMS WILL REQUIRE STRONG CORE SKILLS WITH CONFIDENCE IN GENERAL SECURITY KNOWLEDGE AND HAVE STRONG SECURITY UNDERSTANDING.

AS A KEY MEMBER OF OUR TEAM, THE VULNERABILITY MANAGEMENT ENGINEER WILL WORK ON THE \'FRONT LINES\' OF THE SALESFORCE PRODUCTION ENVIRONMENT, THE LARGEST SAAS PLATFORM ON THE PLANET, PROTECTING OUR CRITICAL INFRASTRUCTURE AND PROACTIVELY DEFENDING OUR CUSTOMERS\' DATA. THE VULNERABILITY MANAGEMENT ENGINEER IS RESPONSIBLE FOR OPERATIONAL TASKS SUCH AS SCANNING, REPORTING ON VULNERABILITIES, ASSISTING TEAMS WITH REMEDIATION, DEVELOPING THE TOOLS AND CHECKS TO HELP US MAINTAIN OUR PRODUCTION SCANNING ENVIRONMENT, ENSURING THAT WE MAINTAIN OUR EXTERNAL COMPLIANCE CERTIFICATIONS, AND DEPLOYING AND MAINTAINING THE SYSTEMS IN OUR PRODUCTION DATA CENTERS.

HERE S WHAT YOU LL DO

*

MANAGE AND REVIEW HOST CONFIGURATION BASELINES
*

SYSTEM VULNERABILITY ASSESSMENTS AND REMEDIATION, INCLUDING THE ASSESSMENT/DEPLOYMENT OF VENDOR SECURITY UPDATES
*

SUPPORT ONGOING AND NEW SERVICE/COMPLIANCE INITIATIVES
*

SECURITY INCIDENT RESPONSE IN COORDINATION WITH OTHER TEAMS ACROSS THE COMPANY AND/OR EXTERNALLY AS REQUIRED
*

DESIGN AND DEVELOP TOOLS TO AUTOMATE OPERATIONS OR REPORTING TASKS

HERE S WHAT YOU LL NEED

*

ABILITY TO WORK WITH MULTIPLE CUSTOMERS, CONTEXT SWITCH, LEARN FAST, AND COMMUNICATE WELL
*

DEMONSTRATED UNDERSTANDING OF GENERAL UNIX/LINUX SYSTEMS ADMINISTRATION (OR SIMILAR, E.G. UBUNTU, SOLARIS, ETC.)
*

KNOWLEDGE OF HOST-BASED SECURITY
*

WORKING KNOWLEDGE OF STANDARD UNIX INFRASTRUCTURE TOOLS/PROTOCOLS (DHCP, DNS, NTP, SYSLOG, SSH, IPSEC ETC.)
*

WORKING KNOWLEDGE OF CONFIGURATION BASELINE STANDARDS (STIG, CIS, ETC.)
*

BASIC CROSS-FUNCTIONAL UNDERSTANDING OF NETWORK ENGINEERING CONCEPTS AND PROTOCOLS (E.G., TCP, UDP, SSL, ETC.)
*

EXPERIENCE WITH PRODUCTION AND CUSTOMER-FACING DATA CENTER ENVIRONMENTS
*

EXPERIENCE WITH WRITING SCRIPTS AND AUTOMATION (PERL, GO, SHELL, PYTHON, ETC)
*

EXPERIENCE UNDERGOING AUDITS SPECIFIC TO GOVERNMENT STANDARDS INCLUDING FEDRAMP, DOD SRG, PCI, SOC, ISO

*

WORKING IN HIGH-AVAILABILITY, 24X7X365 LARGE-SCALE MULTI-DATA CENTER ENVIRONMENT
*

EXPERIENCE WITH PEN TESTING, VULNERABILITY SCANNING, WEB DEVELOPMENT, AND SERVER ADMINISTRATION EXPERIENCE.
*

STRONG COMMUNICATION SKILLS
*

SECURITY BASED CREDENTIALS HIGHLY DESIRED (SSCP, GIAC GCUX, GSEC, GCED,GCIH,GCIA, ETC)

"U.S. CITIZEN (U.S. BORN OR NATURALIZED) WHO DOES NOT HOLD DUAL CITIZENSHIP. YOU AGREE TO COMPLETE A MINIMUM BACKGROUND INVESTIGATION (MBI) FOR A MODERATE PUBLIC TRUST POSITION WITH THE U.S. FEDERAL GOVERNMENT OR OTHER CLEARANCES AS DEEMED APPROPRIATE FOR THE ROLE"

POSTING STATEMENT

Salesforce.com and Salesforce.org are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Headhunters and recruitment agencies may not submit resumes/CVs through this Web site or directly to managers. Salesforce.com and Salesforce.org do not accept unsolicited headhunter and agency resumes. Salesforce.com and Salesforce.org will not pay fees to any third-party agency or company that does not have a signed agreement with Salesforce.com or Salesforce.org.Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.

This candidate must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship and agrees to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.