Description

The Vision

Salesforce is pivoting toward an Agentic AI future. We aren't just looking to "automate" our Security Operations Center (SOC); we are looking to rebuild it as an Agentic SOC.

As an Agentic Security Engineer, you will be at the forefront of the Agentforce revolution. Your mission is to move beyond static playbooks and brittle scripts. You will design, build, and deploy autonomous security agents that can reason, orchestrate tools, and remediate threats at machine scale.

The Role

At Grade 6 (MTS), you are a high-impact individual contributor. You will bridge the gap between traditional Security Engineering and cutting-edge Generative AI. You won't just be using LLMs; you’ll be building the reasoning engines and tool-use frameworks that allow our SOC to operate autonomously.

Key Responsibilities

• Architect Agentic Workflows: Design and implement security agents using Agentforce Platform to handle high-fidelity alerts, from initial triage to full remediation.

• Autonomous Response: Build "Skills" and "Actions" (Apex, Flow, MuleSoft APIs) that allow agents to interact with our global infrastructure, identity providers, and cloud environments (AWS/GCP/Azure).

• Agentic Orchestration: Develop the "brain" of the Agentic CSOC, systems that can decompose complex security incidents into smaller tasks and delegate them to specialized sub-agents.

• Data Strategy: Collaborate with Data Cloud teams to ensure our security agents have the real-time telemetry needed to make informed, context-aware decisions.

Required Skills & Experience

• The "Agent" Mindset: Experience with AI orchestration frameworks (e.g., LangChain, AutoGPT, or ideally Salesforce Agentforce) where the AI is an active participant, not just a chatbot.

• Security Domain Expertise: Deep understanding of the Incident Response lifecycle, MITRE ATT&CK framework, and common attack vectors in SaaS/Cloud environments.

• Engineering Rigor: Professional experience with Apex, Python, or Java. You should be comfortable building the APIs and integrations that give an agent its "hands."

• Data & Infrastructure: Familiarity with Salesforce Data Cloud, Snowflake, or similar high-scale security data lakes.

• Security Guardrails: Knowledge of how to implement "Human-in-the-loop" (HITL) checkpoints and policy-based controls for autonomous actions.

• Salesforce Agentforce Innovator certification

Preferred Qualifications

• Experience building or scaling a Modern SOC (SOAR, XDR, or Next-Gen SIEM).

• Contributions to open-source AI or security projects.

A background in Detection Engineering, knowing exactly what a "good" signal looks like so you can teach an agent to find it.