Computer Security Incident Report Analyst with TS/SCI Clearance [Salesforce National Security]

salesforce.com, inc.; Herndon (VA); On-site; USD 111,000 - 122,000; Full time

Benefits offered by this job

Paid time off

Medical plan

Dental plan

Vision plan

Mental health support

Paid parental leave

Life and disability insurance

401(k)

Employee stock purchase program

Job summary

Salesforce is seeking a Computer Security Incident Response Analyst on-site in Northern Virginia to support U.S. Government agencies.

This customer‑facing role is part of Salesforce’s Government Cloud Security Operations team and requires 24x7 security monitoring and rapid incident response with coordination across multidisciplinary teams. The position emphasizes on-site work in Northern Virginia, with on-call duties and occasional local travel to customer sites.

Qualifications

• U.S. citizen with an active Top Secret/SCI clearance with Polygraph.
• Related technical degree in Computer Science, Software Engineering, Cybersecurity, Information Assurance, or equivalent work experience.
• At least two years of experience in cybersecurity, engineering, or incident response roles.
• Strong interpersonal and communication skills to coordinate responses with diverse stakeholders.
• Problem-solving ability and technical understanding of the information-security threat landscape.
• Experience with AWS Cloud, Splunk, Azure Sentinel, or ElasticStack preferred.

Responsibilities

• Respond to and investigate cyber security events within SNS Cloud environments.
• Track and document security events and incidents in a ticketing system.
• Analyze log data in a SIEM for signs of malicious activity.
• Coordinate incident response actions with technical and non-technical stakeholders to meet SLAs.
• Automate workflows and develop analytics to mitigate adversaries’ TTPs.
• Participate in on-call support and occasional local travel to customer sites.

Skills

Communication skills

Problem solving

Threat landscape understanding

On-call coordination

Incident response

Education

Bachelor's degree in Computer Science / Software Engineering / Cybersecurity / Information Assurance

Tools

AWS Cloud

Splunk

Azure Sentinel

ElasticStack

SQL

SPL

GraphQL

Job description

Computer Security Incident Response Analyst

This customer‑facing role is located on‑site in Northern Virginia and is non‑remote. It is part of Salesforce’s Government Cloud Security Operations team, supporting U.S. Government agencies that perform national security functions. The Analyst will handle 24x7 security monitoring, real‑time analysis of alert data, rapid incident response, and coordination across multidisciplinary teams to resolve high‑priority incidents.

Job Category

Software Engineering

Responsibilities

• Respond to and investigate cyber security events within SNS Cloud environments.
• Track and document security events and incidents in a ticketing system.
• Analyze log data in a SIEM for signs of malicious activity.
• Coordinate incident response actions with technical and non‑technical stakeholders to meet SLAs.
• Automate workflows and develop analytics to mitigate adversaries’ TTPs.
• Participate in on‑call support and occasional local travel to customer sites.

Minimum Qualifications

• U.S. citizen with an active U.S. Government Top Secret/SCI clearance with Polygraph.
• Related technical degree in Computer Science, Software Engineering, Cybersecurity, Information Assurance, or equivalent work experience.
• At least two years of experience in cybersecurity, engineering, or incident response roles.
• Strong interpersonal and communication skills to coordinate responses with diverse stakeholders.
• Problem‑solving ability and technical understanding of the information‑security threat landscape.
• Experience with AWS Cloud, Splunk, Azure Sentinel, or ElasticStack preferred.

Desired Skills

• Technical understanding of attack vectors, tools, network protocols and application layer protocols.
• Familiarity with incident response and security operations in cloud environments.
• Experience with Mac OS X, Windows, Linux/Unix system administration and security controls.
• Knowledge of AWS, Azure, or GCP administration and security controls.
• Experience creating dashboards with Splunk, Kibana, Grafana.
• Proficiency in data query languages such as SQL, SPL, GraphQL.
• Proficiency in scripting languages (Bash, Python) and workflow automation.
• Operational monitoring of intrusion detection systems, firewalls, WAFs, logging systems.
• Forensic investigation skills for system artifacts.
• CISSP, GCFR, GCIA, GCIH or other relevant certifications desirable.

Compensation and Benefits

The typical base salary range is $111,000 - $122,000 annually. Benefits include paid time off, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k) and an employee stock purchase program. Incentive compensation, equity, and other benefits may also apply.

Equal Opportunity Employer Statement

Salesforce is an equal‑opportunity employer and maintains a policy of non‑discrimination for all employees and applicants.

Accommodations

If you need a reasonable accommodation during the application or recruiting process, submit a request via the Accommodations Request Form.