{"id":1650826,"url":"https://alion.io/job/steampunk-salesforce-security-engineer","title":"Salesforce Security Engineer","company":{"id":3854754,"name":"Steampunk","domain":"steampunk.com","url":"https://alion.io/company/steampunk-5","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Enterprise Apps","role_family":"Enterprise Apps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["McLean, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":97000,"max_usd":210000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":287},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FedRAMP","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-02T00:14:38Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-04T02:45:50Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Overview\nWe are seeking a Salesforce Security Engineer to serve as the primary point of contact for security across the Salesforce environment. In this role, you will help strengthen the security posture and reduce security risk across the environment, address security issues and questions raised by internal and external teams, assist Information System Security Officers (ISSOs) in securing their applications, gather security artifacts to support Authorization to Operate (ATO) activities, and build Splunk queries to identify anomalous events.\nContributions\nResponsibilities include:\nDesign, implement, and audit Salesforce access controls (e.g., profiles, permission sets, roles, sharing rules, field-level security), applying least privilege principles across all user populations.\nConduct periodic access reviews and recertifications to identify and remediate overly permissive or outdated access.\nConfigure and maintain Salesforce security settings via the Setup Menu, including but not limited to session settings, login IP ranges/restrictions, password policies, multi-factor authentication (MFA) enforcement, Health Check, Shield Platform Encryption, and Event Monitoring.\nBuild and maintain Splunk queries and dashboards to monitor Salesforce login events, permission changes, and anomalous access patterns, and support incident investigations with log analysis.\nAssess and harden web application security for Salesforce Connected Apps, including internet-facing security settings (Cross-Origin Resource Sharing (CORS), Content Security Policy (CSP), Trusted URLs, OAuth/Connected App policies, session security).\nAssist ISSOs in securing their applications and collecting security artifacts in support of their assessment and authorization efforts.\nPartner with system owners and compliance teams to ensure security configurations align with federal security requirements (e.g., NIST 800-53, FedRAMP, as applicable).\nDocument security configurations, findings, and remediation steps for audit and ATO support.\nReview and provision privileged user access.\nQualifications\nRequired\nAbility to obtain and maintain a U.S. Government security clearance.\nBachelor’s degree.\n8-10 years of experience in Salesforce administration or security engineering.\nStrong knowledge of Salesforce access control models (profiles, permission sets, roles, sharing rules) and least privilege implementation.\nExtensive experience with Salesforce Setup Menu security configuration (session security, login policies, Health Check, Event Monitoring, Shield).\nProficient in writing Splunk search queries (SPL) for log analysis, monitoring, and alerting.\nWorking knowledge of web application security concepts, including internet security settings (CSP, CORS, trusted domains, OAuth flows).\nPreferred\nSalesforce Administrator (ADM 201) or Salesforce security-related certification.\nOne of the following security certifications: CISSP, CISM, or similar.\nFamiliarity with NIST 800-53 security controls.\nExperience supporting federal government clients or ATO processes.\nAbout steampunk\nSteampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers - and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.\nWe are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.","description_format":"text","description_chars":3999,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-02T00:14:38Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:15","velocity","win:early","comp:brand"],"computed_at":"2026-10-03T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/steampunk-salesforce-security-engineer","json_url":"https://alion.io/job/steampunk-salesforce-security-engineer.json","meta":{"generated_at":"2026-10-04T03:03:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":4640,"day_limit":5000,"remaining_today":360,"minute_limit":60,"resets_at":"2026-10-05T00:00:00Z"}}}