Computer Security Incident Report Analyst with TS/SCI Clearance [Salesforce National Security]

109 Computable Insights LLC; Herndon (VA); On-site; USD 111,000 - 122,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Mental health support

Parental leave

Life and disability insurance

401(k)

Employee stock purchase program

Job summary

Salesforce is seeking an on-site Computer Security Incident Response Analyst in Northern Virginia to join the Government Cloud Security Operations team. You will provide 24×7 monitoring, real-time analysis of alerts, and rapid incident response across SNS Cloud environments for U.S.

Government agencies. The role requires TS/SCI clearance with polygraph, a related technical degree or equivalent experience, and 2+ years in cybersecurity or incident response.

Qualifications

• Minimum: US citizen with TS/SCI clearance and Polygraph.
• A relevant technical degree or equivalent experience.
• At least 2 years of cybersecurity/incident response experience.
• Strong interpersonal and communication skills for coordinating responses across stakeholders.
• Understanding of security threat landscape and attack vectors.
• Experience with cloud security tools (AWS, Azure, ElasticStack, Splunk).

Responsibilities

• Respond to and investigate cybersecurity events within SNS Cloud environments.
• Document security events and incidents in a ticketing system.
• Analyze log data for indicators of compromise in SIEM.
• Coordinate incident response actions across multi-disciplinary teams to meet SLAs.
• Automate workflows and develop analytics; apply mitigations for adversary techniques.
• Provide on-call support and occasional local travel to customer sites.

Skills

Incident response

Communication

Problem solving

Cross team coordination

Security monitoring

Education

Computer Science / Cybersecurity degree

Tools

Splunk

Azure Sentinel

ElasticStack

AWS Cloud

Job description

Computer Security Incident Response Analyst

Location: On‑site in Northern Virginia. The position is not remote.

Salesforce seeks an Incident Response Analyst for the Government Cloud Security Operations team, part of the Salesforce National Security Infrastructure Security Team. The analyst will work on the front line of environments supporting U.S. Government agencies and departments, providing 24×7×365 security monitoring, real‑time analysis of security alerts, and rapid incident response across SNS Cloud environments.

Key Responsibilities:

• Respond to and investigate cyber security events within SNS Cloud environments.
• Track and document security events and incidents in a ticketing system.
• Analyze log data for signs of malicious activity in a SIEM.
• Coordinate incident response actions across multi‑disciplined teams for high‑priority operations, meeting service‑level agreements, escalating as needed, and providing updates to senior leaders.
• Automate workflows and processes, develop new analytics, apply mitigations for adversary TTPs, and hunt for undetected indicators of compromise.
• Provide periods of 24×7 on‑call support on an as‑needed basis and occasional local travel to customer sites.

Minimum Qualifications:

• U.S. citizen with an active U.S. Government Top Secret/SCI clearance with Polygraph.
• A related technical degree (Computer Science, Software Engineering, Cybersecurity, Information Assurance) or equivalent experience.
• At least 2 years of experience in cybersecurity, engineering, or incident response roles.
• Strong interpersonal and communication skills for coordinating responses across technical and non‑technical stakeholders.
• Strong problem‑solving ability.
• Technical understanding of the information security threat landscape, including attack vectors and tools.
• Experience with AWS Cloud, Splunk, Azure Sentinel, or ElasticStack preferred.

Desired Skills:

• Deep knowledge of TCP/IP and application layer protocols (HTTP, SMTP, DNS).
• Familiarity with incident response and security operations in cloud environments.
• Experience with Mac OSX, Windows, and Linux/Unix system administration and security controls.
• Competence in AWS, Azure, or GCP administration and security controls.
• Experience creating and managing dashboards with Splunk, Kibana, Grafana, etc.
• Knowledge of query languages such as SQL, SPL, GraphQL.
• Proficiency in scripting (Bash, Python) and workflow automation.
• Operational experience with intrusion detection systems, web application firewalls, database security monitoring, firewalls, proxies, antivirus, file integrity monitoring, and OS logs.
• Forensic skills for analyzing system artifacts (filesystem, memory, processes, network connections).
• Relevant certifications (CISSP, GCFR, GCIA, GCIH or related).

Benefits: Salesforce offers medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), employee stock purchase program, and time‑off programs.

Compensation: Typical base salary range: $111,000 – $122,000 annually.

Equal Opportunity Employer

Salesforce is an equal‑opportunity employer and maintains a policy of non‑discrimination for all employees and applicants. All employment decisions are made on merit without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, disability, veteran status, or other protected classifications.