Salesforce Security Monitoring Engineer
Experience: 6–8 Years
Location: Pune – Hybrid
Employment Type: Contract / C2C
We are looking for an experienced Salesforce Security Monitoring Engineer (Salesforce Developer) with strong expertise in Salesforce security architecture, Salesforce Shield, Event Monitoring, security automation, and SIEM integrations.
The ideal candidate should have hands-on experience monitoring Salesforce security events, identifying suspicious activities, implementing security controls, and integrating Salesforce security telemetry with enterprise security tools.
Key Responsibilities
- Implement and maintain the overall Salesforce security model.
- Architect and review Salesforce security models based on business and compliance requirements.
- Work extensively with Salesforce Shield and Event Monitoring.
- Build security monitoring dashboards and reporting solutions.
- Implement automation and monitoring workflows for security event detection and response.
- Develop integrations to collect and analyze Salesforce security signals.
- Support Event Monitoring and Security Center evaluations and proof-of-concepts.
- Develop monitoring-related data models and technical components.
- Create technical documentation, architecture diagrams, implementation guides, and operational artifacts.
- Identify abnormal user behavior, suspicious access, and potential data exfiltration.
- Integrate Salesforce security telemetry with SIEM/SOC tools.
Mandatory SkillsSalesforce Event Monitoring – Critical
- Strong hands-on experience with Salesforce Event Monitoring / Shield Event Monitoring.
- Experience analyzing:
- Login and authentication activity
- API usage
- Report and export activity
- URI/page access
- Bulk API activity
- Lightning interactions
- Permission and configuration changes
- Experience with EventLogFile, Event Monitoring Analytics, and near-real-time events.
- Ability to detect suspicious behavior and potential security threats.
Salesforce Security Architecture
- Strong understanding of:
- Profiles
- Permission Sets and Permission Set Groups
- Roles
- Organization-Wide Defaults (OWD)
- Sharing Rules
- Experience with MFA, SSO, OAuth, Connected Apps, and Session Security.
- Knowledge of IP restrictions, login policies, and trusted networks.
- Experience performing Salesforce security assessments and identifying excessive or overly permissive access.
Salesforce Shield
Hands-on experience with:
- Event Monitoring
- Platform Encryption
- Field Audit Trail
- Transaction Security Policies
Experience with Transaction Security Policies and automated threat response is highly preferred.
SIEM & Security Operations Integration
Experience integrating Salesforce security telemetry with SIEM platforms such as:
- Splunk
- Microsoft Sentinel
- QRadar
- Other SIEM/SOC platforms
Understanding of the complete security monitoring lifecycle:
Salesforce Events → Event Monitoring → SIEM → Detection/Correlation → Alert → SOC Investigation & Response
Preferred Security Use Cases
Candidates should have experience implementing security monitoring for:
- Large or unusual report exports
- Excessive API data extraction
- Suspicious login patterns
- Login attempts from unexpected IP addresses or locations
- Unauthorized access to sensitive records
- Abnormal user behavior
- Compromised integration or service accounts
- Permission or privileged access changes
- Unusual Connected App or OAuth activity
Candidate Requirements
- 6–8 years of Salesforce development and security experience.
- Strong hands-on expertise in Salesforce Security Monitoring.
- Practical experience with Salesforce Shield and Event Monitoring.
- Experience with security automation and monitoring workflows.
- Good understanding of enterprise security operations and SIEM integration.
- Strong analytical, troubleshooting, and communication skills.
Pay: ₹90,000.00 - ₹130,000.00 per month
Experience:
- Salesforce: 6 years (Required)
Work Location: Hybrid remote in Pune, Maharashtra (Pune, Pune District)
