Salesforce Security Specialist (5-9 yrs)

Job Summary :

We are seeking an experienced Salesforce Security Specialist to join our team.

The ideal candidate will have extensive experience in securing Salesforce platforms, including Sales Cloud, Service Cloud, Marketing Cloud, and other Salesforce applications.

This role involves implementing, maintaining, and optimizing security configurations within Salesforce, ensuring data privacy, integrity, and compliance across the platform.

You will be responsible for protecting sensitive data, securing access to Salesforce systems, and ensuring the overall security health of the environment.

Key Responsibilities :

- Lead the configuration and management of Salesforce security measures, including user roles, profiles, permissions, and access controls.

- Implement and configure platform security controls such as OWD sharing settings, session management, login policies, IP restrictions, and guest user access restrictions.

- Perform Apex code reviews for security vulnerabilities, ensuring that all code complies with security best practices and is free of potential threats.

- Utilize Salesforce Shield to implement and manage event monitoring, platform encryption, and field audit trail to enhance data security and ensure compliance with organizational policies.

- Manage Salesforce Encryption tools, including data encryption at rest and in transit, ensuring sensitive information is properly secured and encrypted within the Salesforce environment.

- Oversee and manage Salesforce access management, ensuring that user access is correctly set up based on roles and profiles, with proper management of role-based access controls (RBAC).

- Regularly assess and update Salesforce access configurations, identifying areas for improvement in security posture and access control management.

- Monitor Salesforce security logs and events, using advanced monitoring tools to detect potential security incidents.

- Lead the response to security events within Salesforce, performing investigations, root cause analysis, and recommending corrective actions.

- Provide regular security assessments and health checks for the Salesforce platform, identifying vulnerabilities and areas for improvement.

- Ensure data security within Salesforce by implementing and enforcing security policies and procedures, including user authentication, data access controls, and encryption protocols.

- Maintain knowledge of industry standards and best practices for Salesforce security, ensuring all security measures meet compliance and regulatory requirements (such as GDPR, HIPAA, etc.)

- Create, maintain, and update technical design documentation detailing the architecture, configurations, and processes used in securing the Salesforce environment.

- Provide detailed reports on the security status, incidents, vulnerabilities, and improvements within the Salesforce environment.

- Work closely with the Salesforce development, operations, and administration teams to implement security measures and drive security initiatives.

- Communicate security risks and remediation actions to both technical and non-technical stakeholders in a clear and concise manner.

- Provide training to internal teams and users on Salesforce security best practices, policies, and procedures.

Required Skills and Qualifications :

5-9 years of experience in Salesforce security, with a strong focus on securing Salesforce platforms such as Sales Cloud, Service Cloud, Marketing Cloud, and other Salesforce applications.

Technical Skills :

- Expertise in Apex code review and the ability to identify security vulnerabilities in code.

- Proficiency with Salesforce Shield, including managing event monitoring, platform encryption, and field audit trail.

- Strong knowledge of Salesforce access management, including user setup, roles, profiles, permissions, and role-based access controls

- In-depth experience with configuring and optimizing Salesforce security settings, including OWD sharing settings, session management, login policies, IP restrictions, and guest user access restrictions.

- Hands-on experience with Salesforce encryption tools, ensuring data is encrypted at rest and in transit.

- Solid understanding of Salesforce objects, fields, workflows, automation rules, and reporting tools, with the ability to streamline security processes within Salesforce.

- Expertise in Salesforce security monitoring, with the ability to detect, analyze, and respond to security events