Title: Salesforce Security Specialist
Location: Remote
Duration: Long Term
Client: Victory capital management
Experience: 10+ Years
MOI: Virtual
Note: Must have Salesforce security and Okta
Job Description
The Salesforce Security Specialist leads security assessments of client Salesforce environments. The role runs the review, performs the hands-on checks, and signs off every finding that goes to the client. The specialist is the senior technical voice in front of client security, platform, and leadership teams.
Required Skills - Assessment leadership; Identity and sign-in (Okta to Salesforce); Integrations and AWS; Permissions, sharing, and code; Logging and response; Reporting and client communication
Job Duties - The assignment is a three-week security review for a financial services client. Scope covers two Salesforce orgs: an established org with accumulated technical debt and a new Financial Services Cloud org approaching launch. It also covers the Okta sign-in path into both orgs and roughly a dozen integrations that run through AWS Lambda. All work is read-only in production, with anything hands-on done in a sandbox.
Job Responsibilities
Job Requirements - Experience. 8+ years of hands-on Salesforce experience, with at least 3 years in a technical lead or technical architect role.
* Security model. Expert knowledge of the Salesforce access model, including effective-access analysis across profiles, permission sets, sharing, and field-level security.
* Identity. Hands-on configuration of Salesforce SSO with Okta or a comparable IdP, MFA, session security, connected apps, OAuth flows, Named Credentials, and integration users.
* Code review. Ability to read and review Apex and Flows for security defects, and working experience with Salesforce Code Analyzer or comparable static analysis tools.
* Logging. Working knowledge of Salesforce Shield or Event Monitoring, audit logs, and log export to a SIEM.
* Integrations. Understanding of AWS services commonly used in Salesforce integrations (Lambda, S3, IAM, Secrets Manager) sufficient to review the Salesforce-facing side.
* Communication. Experience writing evidence-based findings and presenting them to both executives and technical teams.
* Assessment experience. Prior work in a security assessment, audit, or remediation engagement on Salesforce.
Desired Skills & Experience - Salesforce Certified Identity and Access Management Architect
* Salesforce Certified Sharing and Visibility Architect
* Salesforce Platform Developer I or II; Salesforce Platform Administrator
* Financial Services Cloud Accredited Professional, or delivery experience on Financial Services Cloud
* A recognized security certification such as CISSP, CCSP, or AWS Certified Security, Specialty
* Experience in regulated financial services, including asset or investment management
* Familiarity with Salesforce policy for customer-initiated security assessments
