Job Description

The Salesforce Security Specialist leads security assessments of client Salesforce environments. The role runs the review, performs the hands-on checks, and signs off every finding that goes to the client. The specialist is the senior technical voice in front of client security, platform, and leadership teams. Required Skills - Assessment leadership; Identity and sign-in (Okta to Salesforce); Integrations and AWS; Permissions, sharing, and code; Logging and response; Reporting and client communication Job Duties - The assignment is a three-week security review for a financial services client. Scope covers two Salesforce orgs: an established org with accumulated technical debt and a new Financial Services Cloud org approaching launch. It also covers the Okta sign-in path into both orgs and roughly a dozen integrations that run through AWS Lambda. All work is read-only in production, with anything hands-on done in a sandbox. Job Responsibilities Job Requirements - Experience. 8+ years of hands-on Salesforce experience, with at least 3 years in a technical lead or technical architect role. Security model. Expert knowledge of the Salesforce access model, including effective-access analysis across profiles, permission sets, sharing, and field-level security. Identity. Hands-on configuration of Salesforce SSO with Okta or a comparable IdP, MFA, session security, connected apps, OAuth flows, Named Credentials, and integration users. Code review. Ability to read and review Apex and Flows for security defects, and working experience with Salesforce Code Analyzer or comparable static analysis tools. Logging. Working knowledge of Salesforce Shield or Event Monitoring, audit logs, and log export to a SIEM. Integrations. Understanding of AWS services commonly used in Salesforce integrations (Lambda, S3, IAM, Secrets Manager) sufficient to review the Salesforce-facing side. Communication. Experience writing evidence-based findings and presenting them to both executives and technical teams. Assessment experience. Prior work in a security assessment, audit, or remediation engagement on Salesforce. Desired Skills & Experience - Salesforce Certified Identity and Access Management Architect Salesforce Certified Sharing and Visibility Architect Salesforce Platform Developer I or II; Salesforce Platform Administrator Financial Services Cloud Accredited Professional, or delivery experience on Financial Services Cloud A recognized security certification such as CISSP, CCSP, or AWS Certified Security, Specialty Experience in regulated financial services, including asset or investment management Familiarity with Salesforce policy for customer-initiated security assessments