About This Role
Salesforce Security Engineer | Senior | Contract | Remote (United States)
About the Company
A leading Salesforce security engineering company at the forefront of enterprise platform protection, this organization partners with large-scale clients to build and secure mission-critical Salesforce environments. Their teams blend deep development expertise with rigorous security engineering to deliver solutions that are both powerful and resilient. If you thrive at the intersection of software craftsmanship and application security, this is a team worth joining.
The Role
This is a senior-level contract opportunity for a Salesforce engineer who brings genuine security depth to their development practice. You will take ownership of building, reviewing, and hardening custom Salesforce applications — writing production-quality Apex code while simultaneously identifying and closing security gaps across integrations, platform configurations, and deployment pipelines. The work demands someone equally comfortable in a code editor and a vulnerability assessment, bridging the worlds of Salesforce development and application security in a fully remote environment.
What You Will Do
- Design, build, and maintain custom Salesforce applications using Apex, Lightning Web Components, and Salesforce APIs
- Conduct thorough secure code reviews to surface vulnerabilities including SOQL injection, broken access control, and improper input handling
- Apply and enforce Salesforce platform security controls — profiles, permission sets, role hierarchies, sharing rules, and field-level security
- Develop and secure REST and SOAP API integrations with third-party systems, ensuring proper authentication and authorization flows
- Support static application security testing, vulnerability assessments, and end-to-end remediation efforts
- Collaborate across development, architecture, and security teams to embed secure design patterns from the ground up
- Contribute to CI/CD pipelines with a focus on automated testing, code quality gates, and secure deployment practices
- Produce clear technical documentation covering security findings, remediation plans, design decisions, and development standards
What We Are Looking For
• 7+ years in Salesforce development and custom Apex programming
• Strong proficiency in SOQL and SOSL query languages
• Hands-on experience building Lightning Web Components (LWC)
• Deep knowledge of Salesforce platform security architecture and access controls
• Proven experience performing secure code reviews and vulnerability remediation
• Solid understanding of OWASP Top 10 and common web application attack patterns
• Experience with OAuth 2.0, API authentication, and authorization frameworks
• Familiarity with Salesforce DX, Git, and CI/CD tooling
The ideal candidate has spent years working inside complex Salesforce orgs where security was not an afterthought but a core engineering concern. They understand how platform-level misconfigurations and insecure custom code can compound into serious risk, and they know how to fix both. This person brings the credibility of a seasoned Salesforce developer alongside the analytical mindset of a security engineer — able to write clean, performant Apex in the morning and lead a vulnerability review in the afternoon. Strong communication skills matter here, as this role regularly bridges technical findings with cross-functional stakeholders.
Nice to Have
• Salesforce Platform Developer I or II certification
• Experience with DevSecOps practices and secure pipeline integration
• Knowledge of data protection principles and encryption strategies
• Hands-on experience with secrets management tooling
• Familiarity with Salesforce Shield or Platform Encryption features
• Background working within enterprise security standards and compliance frameworks
Candidates who bring certification alongside practical security tooling experience — such as static analysis platforms or secrets management solutions — will stand out. Experience with Salesforce Shield or Platform Encryption signals a deeper familiarity with the platform's native security capabilities that translates directly into day-one impact. A background shaped by enterprise security environments, where compliance, auditability, and data governance are constant considerations, aligns well with the complexity of the engagements this role supports.
What We Offer
This is a fully remote contract position open to candidates based in the United States. You will work alongside experienced engineers and security professionals on high-visibility Salesforce environments, gaining exposure to enterprise-scale security challenges that sharpen both your development and security engineering skill sets. The nature of the work offers consistent opportunities to deepen your expertise across the Salesforce platform, expand your knowledge of application security practices, and build a track record on engagements that matter.