Senior Incident Responder: Lead IR & Threat Hunting

Salesforce; Dublin; On-site; EUR 120,000 - 180,000; Full time

Job summary

Salesforce is seeking a Senior Incident Responder in Dublin to join our security operations team. You will participate in technical investigations during security incidents to protect critical infrastructure and customer data, conduct threat hunts, and enhance detection and incident response capabilities across our environments.

You will help improve CSIRT technologies and processes while collaborating with internal and external partners.

Qualifications

• Minimum 5+ years of prior specialised security operations experience including incident response in production environments.
• Experience with EDR solutions (CrowdStrike, Cybereason).
• Experience with SIEM solutions (Splunk, Google Security Operations, Microsoft Sentinel).
• Experience with monitoring devices and security tooling (WAFs, IDS/IPS, proxies, antivirus, EIM).
• Experience with scripting, automation or agentic AI capabilities.
• Strong communication and relationship-building skills.
• Understanding of cloud security in AWS/Azure/GCP.

Responsibilities

• Participate in technical investigations during security incidents to protect critical infrastructure and customer data.
• Conduct threat hunts and enhance detection and incident response capabilities.
• Improve CSIRT technologies and processes and drive incident response improvements.
• Collaborate with peers internal and external to the function to strengthen security posture.

Skills

Security operations

Incident response

EDR (CrowdStrike)

SIEM (Splunk)

Network security monitoring

Scripting/automation

Cloud security (AWS/Azure/GCP)

Communication skills

Tools

CrowdStrike

Cybereason

Splunk

Google Security Operations

Microsoft Sentinel

Job description

Salesforce is seeking a Senior Incident Responder in Dublin to join our security operations team. You will participate in technical investigations during security incidents to protect critical infrastructure and customer data, conduct threat hunts, and enhance detection and incident response capabilities across our environments.

You will help improve CSIRT technologies and processes while collaborating with internal and external partners.