Software Engineer (MTS), Frontier Strike (EntSecTech)
Backend Developer
API
APIs
Application Security
Application Security Engineering
Automation
Cloud
Cloud Infrastructure
Cloud Native
Cloud Operations
Cloud Platform
Cloud Platforms
Cloud Platforms Cloud Platforms
Cloud Technology
Containerization
DevOps
Devops Tools
DevSecOps
Docker
Engineering
Engineering Software
Facilities Management
Identity and Access Management
Information Security
Information Technology (IT)
Infrastructure As Code
Kubernetes
Management
Platform Engineering
Policy Engine
Programming
Programming Language
Programming Languages
Project Management
REST APIs
Risk Management
Secret Management
Security
Security Automation
Security Engineer
Software Engineer
Software Engineering
Software Security
Job Description
Join Salesforce to build and operate an autonomous AI red-teaming platform that runs secure, repeatable adversarial test suites from staging through production.
Responsibilities
- Design and extend Go microservices that orchestrate multi-container test suites, including primary and utility containers, shared ephemeral volumes, and lifecycle synchronization to onboard new attack techniques as automated suites.
- Build policy-based sidecar gateways that mediate each test suite’s access to target systems (mocked, staging, and production) while enforcing least-privilege and blast-radius limits as risk tiers increase.
- Implement pipeline stages that dedupe, suppress noise, and auto-escalate critical findings (injection, server-side request forgery (SSRF), privilege escalation, data exfiltration) so only real signal reaches the persistent findings store.
- Design per-test-suite secrets isolation using a dedicated vault, pod, and service account per suite, including automated credential rotation to prevent a compromised suite from accessing other suites’ credentials.
- Deploy and operate containerized workloads on Kubernetes using Helm and Terraform on Amazon Web Services (AWS), balancing cost sensitivity across suite complexity.
- Integrate with internal large language model (LLM) gateway services to track token usage and cost per scan, and build throttling and authorization controls for expensive executions.
- Implement RBAC, network sandboxing, and geofencing to extend automated red-teaming safely from test environments to production.
- Monitor and troubleshoot distributed platform components, ensuring findings-pipeline data integrity and catching misconfigurations before they become production incidents.
- Build and ship production-grade software with modern engineering practices, applying AI as a core part of development to deliver secure, optimized, high-quality code.
- Design and orchestrate complex systems where AI agents integrate into human workflows to improve efficiency and innovation at scale.
- Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards for reliable AI operation.
- Critically evaluate code, including both human- and AI-generated output, for correctness, quality, security, and performance.
Requirements
- 2 - 4 years of professional software development experience.
- Proficiency in Go; experience with Python or Java is acceptable.
- Experience with distributed systems, microservices, and REST or gRPC APIs.
- Familiarity with Kubernetes, Docker, Helm, and Terraform in a cloud environment, with AWS preferred.
- Understanding of software security fundamentals: OWASP Top 10, least privilege, and secrets management.
- Strong problem-solving and debugging skills in distributed, containerized systems.
- Ability to work in a large-scale enterprise setting with production-safety constraints.
- AI-first approach to engineering, using AI to move faster and contribute beyond a single specialty.
- Experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor) in development workflows.
- Advanced prompt engineering skills, writing precise structured prompts and cultivating system context to improve reliability, security, and production readiness.
- Bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent experience.
Technologies
- Go, Python, Java
- REST, gRPC
- Kubernetes, Docker, Helm, Terraform
- Amazon Web Services (AWS)
- Large language model (LLM) gateway services
- Role-based access control (RBAC)
- OWASP Top 10
- Secrets management (HashiCorp Vault)
- Cloud key management services (KMS)
- Open Policy Agent (OPA)
- mTLS
- Identity and access management (IAM)
- NIST, ISO, SOC 2
- AI tools: Claude Code, GitHub Copilot, Codex, Cursor
About the Team
- Frontier Strike, part of Enterprise Security Technology (EntSecTech), builds and operates Harness Orchestrator, an autonomous AI red-teaming platform that continuously tests identity and AI-integrated systems like a real attacker.
- This role builds the orchestration engine, policy gateways, and secrets-isolation systems to enable automated adversarial testing against production.
- AI is a core part of the development workflow, pairing distributed-systems engineering with modern AI-assisted tooling to ship secure, production-grade code faster.
Even Better If…
- Experience with policy engines (e.g., Open Policy Agent (OPA)) or other fine-grained authorization frameworks.
- Exposure to AI/LLM security, adversarial testing, or red-teaming.
- Experience with secrets vault technologies (e.g., HashiCorp Vault, cloud key management services (KMS)).
- Familiarity with sidecar proxy/gateway patterns and mutual Transport Layer Security (mTLS).
- Experience with identity and access management (IAM), cybersecurity, or compliance frameworks (NIST, ISO, SOC 2).
Location and Employment
- Bellevue, WA (onsite)
- Salary range: USD 117,200 - 176,700 per year
Accommodations
If you need a reasonable accommodation during the application or recruiting process, submit a request via the Accommodations Request Form.