Salesforce
Sr. Security Governance Engineer, Secure Build & Change
$148K–$246K
Washington - Seattle +2 · Office Tech-Flexible · Senior · Full-time · Posted Oct 27, 2026
- Location
- Washington - Seattle
Virginia - Mclean
California - San Francisco - Experience
- 7+ years in information security governance, security engineering, technology risk, or related functions.
- Visa sponsorship
- U.S. Citizenship or Permanent Residency required; visa sponsorship is not available.
About the job
Develops security policies, measurable controls, and governance processes that are integrated into engineering workflows; the role focuses on governance and control design, not hands-on software development.
What you'll do
- Develop and manage security policies, standards, and control requirements, including approvals, exceptions, reviews, and change management.
- Build and maintain a traceable control framework, working with engineering to translate requirements into guardrails and validation criteria.
- Own assigned security control domains, assess gaps and risks, and collaborate with security, compliance, risk, audit, legal, and business teams.
What they ask for
- Strong understanding of security policies, standards, control frameworks, and governance processes.
- Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
- Ability to translate regulatory and security requirements into measurable control objectives; understanding of control design, risk assessment, and exception management.
- Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security; familiarity with modern development practices, cloud environments, and CI/CD.
Nice to have
- Experience with Governance-as-Code or Policy-as-Code and policy engines such as OPA/Rego or HashiCorp Sentinel.
- Familiarity with YAML, JSON, Git, infrastructure-as-code, DevSecOps, GRC platforms, CCF, or OSCAL; exposure to security posture management, compliance validation, architecture reviews, or AI governance.
Pay
$148,500 - $223,900 annually (base salary); $178,900 - $246,000 annually (base salary)
Tools
NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, PCI DSS, AWS, Azure, GCP
AI focus
The role may involve exposure to AI governance. Salesforce also uses AI tools to assist with recruiting assessment and evaluation; humans make candidate selection and hiring decisions.
Model-written summary · the original posting is authoritative