Hybrid Systems Engineer, Endpoint Security

at Salesforce

• Job title: Systems Engineer, Endpoint Security
• Job type: Full Time
• Experience level: Lead
• Salary: $128,500 - $176,700 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Ansible, Cloud, Linux, MacOS, Python, Terraform, Go
• Location requirements: Hybrid, New York City, United States

About the role

• Endpoint Security Engineer at Salesforce implementing and operating endpoint security solutions. Collaborating with teams to ensure protection against threats impacting enterprise systems.

Responsibilities

• Implement and support endpoint security tools across the enterprise environments, including: Endpoint Detection & Response (EDR), endpoint hardening and configuration enforcement, malware and virus protection, application control and blocklisting, vulnerability scanning and posture management.
• Help ensure Enterprise-wide deployment of endpoint security tools, achieving high coverage by aligning tool capabilities to the enterprise device inventory (including rollout of agents across macOS, Windows, Linux, and mobile platforms).
• Support the definition and enforcement of policies, SOPs, and operational protocols for endpoint security tools.
• Assist in the design of robust automation pipelines—leveraging scripting—to reduce manual effort, enforce consistency, and support rapid incident response.
• Work closely with senior endpoint engineers contributing towards the detection logic & response workflows, collaborate with SIEM, SOAR, and telemetry teams to integrate and tune event ingestion, alerting, and remediation across multiple systems.
• Engage in threat modeling, vendor evaluation, and platform enhancements; assist in proof-of-concepts (PoCs) for new technologies that align with evolving security and business needs.
• Develop and maintain scripts and automation to reduce manual operational effort, improve consistency of endpoint configurations, and support faster remediation and response workflows.
• Participate in incident response activities by providing endpoint-level insights and remediation support.
• Partner with Product Management throughout the entire project lifecycle, from initial design and vendor selection to implementation and ongoing operations, ensuring projects are delivered on time and with high quality.
• Develop and maintain comprehensive documentation for security services, policies, and procedures.
• Stay current with the latest threats and technologies in the cloud security and endpoint security landscape, actively seeking opportunities to innovate and improve our security posture.

Requirements

• 2–3 years of experience in a hands-on security engineering, systems engineering, or infrastructure role with exposure to endpoint security.
• Experience working with endpoint security tools such as EDR or vulnerability scanning solutions.
• Familiarity with vendors such as CrowdStrike, Tenable, Tanium, Qualys, Palo Alto, or similar.
• Understanding of endpoint operating systems (macOS, Windows, Linux).
• Hands-on experience with scripting or programming (Python, Go, or similar).
• Understanding of common security concepts, attack vectors, and endpoint threat models.
• Familiarity with Agile development practices and the software development lifecycle.
• Exposure to configuration management or infrastructure-as-code tools (e.g., Terraform, Ansible).
• Experience working in an enterprise environment.
• Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent practical experience.

Benefits

• time off programs
• medical
• dental
• vision
• mental health support
• paid parental leave
• life and disability insurance
• 401(k)
• employee stock purchasing program