Staff Software Engineer, Security

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Job Details

About Salesforce

We're Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too - driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good - you've come to the right place.

Job Description: Staff SecOps Software Engineer

Our security team supports the unwritten fourth tenet of Slack's mission: make people's working lives more secure. We're serious about protecting our infrastructure, operations, and most importantly, our customers' data. We take a systemic approach to security and strive to provide a low friction, high-impact security model across everything we do.

We're looking for a golang developer to help contribute to our Security Engineering team. Significant software engineering experience is a requirement, while a side interest in operations, incident response, curiosity, and a deep desire to learn is paramount.

This role is to work directly on the Slack Security Operations team with a focus on our Nebula roadmap. This is an open source project that originated at Slack, and has moved to broader parts of the internet. Collaboration with external corporate partners as well as internal users and developers are all part of the job. The role is within a threat detection focused blue team and includes both incident response and on-call obligations. We know that no system is flawless, but we aim to provide a record of all actions taken in our environment to address any unknowns.

The ideal candidate is passionate about advancing rock-solid systems and aware of the responsibilities of working on a tier-0 service upon which all of Slack operates (all with lots of CI and tests to help you work safely!). We seek programmers interested in removing a single syscall from a critical path so that they can optimize performance. We also intend to partner you with very top-tier developers in the space (no throwing you off the deep end).

In addition to the core & public open source codebase, there is an additional large ecosystem to work on! This includes the certificate authority, Kubernetes integration and the management of a diverse deployment including Linux, macOS and Windows. Many of the current members of this dozen-person team are multidisciplinary engineers; they do SecDevOps sorts of things, they write Go, they write Python, and they scale Elasticsearch to some very interesting and precarious new heights.

This posting is to grow our US-based, widely distributed SecOps contingent which works closely with our additional team members in Melbourne, Australia. We're eager to communicate and collaborate often (over Slack, of course!), but get to see each other's faces in very regular Zoom coworking times. While you'll participate in our on-call work like the rest of the team, we strongly look for you to grow your engineering participation at Slack!

Slack has a positive, diverse, and supportive culture-we look for people who are curious, inventive, and work to be a little better every single day. In our work together we aim to be smart, humble, hardworking, and above all, collaborative.

If this sounds like a good fit for you, why not say "hello?"

What you will be doing

• Writing go to contribute to Nebula, Slack's mesh overlay software defined network

• Detect threats and help Slack be more secure

• Creatively scale and operate the infrastructure and tools that handle millions of events per second

• Respond in our on-call rotation to fix services we run and investigate potential threats

• Identify and develop new features and a roadmap to augment existing tools to protect Slack's production infrastructure and to help make our business lives simpler, more pleasant, more productive, and more secure

What you should have

• Curiosity and creativity. You want to know why something happened, not just that it happened. We have a lot of ideas, but are hopeful that your perspective will push us all forward together to deeper understanding.

• A desire to empower your coworkers. This is a role afforded the latitude to define workstreams, and entrusted to approach engineering problems as an art form. You want the solutions you collaborate on to be easy to maintain and you take pride in the quality of your work.

• Motivation to solve problems, not to patch over quick fixes. Being on-call shouldn't be a burden to team members. If it ever is, fixing it is our highest priority.

• Eagerness to collaborate across the company. We seek to further our approachable and inclusive team ethos. As a software development team first, we are aligned and working with the rest of engineering.

• Broad exposure to various security disciplines and deep understanding of models and reasons behind core security concepts such as MFA, ZeroTrust, and securely managing secrets or tokens.

Bonus Points

• AWS - We run almost everything here, so existing proficiency is a plus, but we can teach you if you're more comfortable with another provider

• Elasticsearch / Kibana - you can readily access information and love metrics

Slack is where work happens. It connects you with the people and apps you work with every day, no matter where you are or what you do. We believe everyone deserves to work in a welcoming, respectful, and empathetic culture. We live by our values and hire accordingly.

Ensuring a diverse and inclusive workplace where we learn from each other is core to Slack's values. We welcome people of different backgrounds, experiences, abilities, and perspectives. We are an equal opportunity employer and a fun place to work. Come do the best work of your life here at Slack.

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at www.equality.com and explore our company benefits at www.salesforcebenefits.com.

Salesforce is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce does not accept unsolicited headhunter and agency resumes. Salesforce will not pay any third-party agency or company that does not have a signed agreement with Salesforce.

Salesforce welcomes all.