Software Engineering - MTS, Trust Intelligence Platform
$117k - $177k • Remote • California - San Francisco
Posted 6d ago
About the job
Salesforce is seeking a Member of Technical Staff to build and operate automation for patching third-party and open-source dependencies across a large service fleet. This role focuses on feature-level work within pipelines that identify vulnerable packages, manage upgrades, create fix pull requests across multiple repositories, and track these fixes through to production. The position is ideal for engineers with strong pipeline and automation skills who are eager to specialize in software supply chain security, with the company providing training on relevant standards like CVE, CVSS, SBOM, SLSA, and Sigstore.
Responsibilities
- Contribute to data pipelines for ingesting vulnerability data, dependency manifests, SBOM artifacts, and deployment metadata.
- Build and maintain batch and streaming jobs with idempotent steps, retries, and clear failure modes.
- Operate deployed pipelines, including on-call duties, debugging production failures, and reducing toil through automation.
- Develop scripts and services to interact with multiple repositories for opening PRs, parsing diffs, and tracking results.
- Author and maintain CI/CD pipelines with automated test coverage for confident review and merging of remediation PRs.
- Resolve attribution issues at the source.
- Collaborate with service owners to implement dependency upgrades, triage breakage, and improve the quality of generated fix PRs.
- Translate scanner output into prioritized, actionable work for engineering teams.
- Write clear design documents, runbooks, and PR descriptions, and maintain documentation.
- Write Python and Java code adhering to existing codebase conventions.
- Add regression tests for bug fixes.
- Learn and apply knowledge of the supply chain domain, including vulnerability lifecycle and dependency resolution.
Requirements
- 3+ years of software engineering experience.
- Strong proficiency in Python and Java.
- Reading fluency in at least two of Node.js, Go, and Ruby.
- Hands-on experience with data pipelines (batch or streaming), including idempotent steps and retries.
- Direct experience building and maintaining CI/CD pipelines with automated test coverage.
- Comfort writing scripts or services that interact with many repositories.
- Experience with a workflow orchestrator (e.g., Airflow, Dagster, Prefect, Temporal).
- Experience with a lakehouse/columnar query engine (e.g., Trino, Spark, BigQuery, Databricks).
- Proficiency in SQL, including non-trivial joins, window functions, and CTEs.
- Experience with end-to-end feature ownership (design, implementation, deployment, maintenance).
- B.S. in Computer Science, Engineering, or equivalent experience.