Salesforce Security Engineer/Lead

Salesforce Security Engineer/Lead

Location: Sacramento, CA Duration: 12 Months Contract Position Required Skills:

• Must be a currently certified information security professional possessing one (1) or more of the following credentials (SSCP, GIAC GCUX, GSEC, GCED, GCIH, GCIA, or other equivalent certification.)
• Four (4) years of experience managing and/or enforcing security compliance standards and regulations (e.g., ISO 27001, PCI, SOC, FISMA, FedRAMP, HIPAA, GDPR, or equivalent industry standard) at an enterprise level.
• Two (2) years of experience securing Salesforce applications.
• Four (4) years of experience authentication/authorization frameworks (e.g., SSO, SAML, OAuth, etc.).
• Three (3) years of experience with secure transport protocols (e.g., SSL, TLS).
• Three (3) years of experience with identity and access management (e.g., IDAM solutions, certificates, PKI).
• Two (2) years of prior experience in vulnerability management and its related processes and procedures within a Salesforce application environment.
• One (1) year of experience with web application programming (i.e., JavaScript, SQL, etc.) and familiarity with OWASP secure coding practices.
• Two (2) years of experience in vulnerability management and its related processes and procedures, utilizing multiple vulnerability scan tools for both Cloud and On-Prem scenarios (Qualys, Nessus, Rapid7, Cloudaware, Redlock, Whitehat, Burp Suite, Netsparker, etc.).