National Security Incident Response Analyst (On-Site in VA)

Salesforce; Herndon (VA); On-site; USD 111,000 - 122,000; Full time

Job summary

Salesforce in Virginia seeks an Incident Response Analyst for the SNS Cloud Security Operations team. You will respond to cyber events, analyze security data, and coordinate responses across engineering, security, and government-facing environments.

The role requires US citizenship and an active TS/SCI clearance with Polygraph, and will involve on-site duties in Northern Virginia with potential travel. You will help defend critical government cloud services and automate security workflows.

Qualifications

• A related technical degree in CS, software engineering, cybersecurity, information assurance, or equivalent.
• 2+ years of cybersecurity, engineering, or incident response experience.
• Strong interpersonal and communication skills for coordinating across stakeholders.
• Solid understanding of information security threat landscape and attack vectors.
• Experience with cloud and security tools such as AWS, Splunk, Azure Sentinel, or ElasticStack.

Responsibilities

• Respond to and investigate cyber security events within SNS Cloud environments.
• Track events in ticketing systems and analyze logs for indicators of compromise.
• Coordinate incident response actions across multi-disciplinary teams to meet SLAs.
• Develop analytics and automation to improve defenses; support on-call rotation as needed.

Skills

5+ years cybersecurity/IR

Stakeholder comms

Threat landscape knowledge

Cloud security basics

SIEM experience (Splunk, ElasticStack)

Scripting (Python, Bash)

Security certifications

Education

Related technical degree (CS/SE/Cybersecurity)

Tools

AWS Cloud

Splunk

Azure Sentinel

ElasticStack

Kibana

Grafana

SQL

Job description

Salesforce in Virginia seeks an Incident Response Analyst for the SNS Cloud Security Operations team. You will respond to cyber events, analyze security data, and coordinate responses across engineering, security, and government-facing environments.

The role requires US citizenship and an active TS/SCI clearance with Polygraph, and will involve on-site duties in Northern Virginia with potential travel. You will help defend critical government cloud services and automate security workflows.