Security Problem Management Lead

Salesforce, Inc.; Virginia, Northern (IL, KY); Hybrid; USD 197,000 - 314,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Mental health support

Parental leave

Life and disability insurance

401(k)

Employee stock purchasing program

Job summary

Salesforce is seeking an experienced Security Problem Management Principal to lead the end-to-end lifecycle of security problems, from detection to remediation, across Security, Engineering, Infrastructure, Product, and Risk teams. You will drive root-cause analyses, establish high-quality problem records, and ensure systemic fixes address underlying weaknesses.

You will partner with incident response and risk teams to translate technical findings into actionable business risk assessments,

Qualifications

• 10+ years of experience in cybersecurity, security operations, incident response, problem management, risk management, reliability engineering, or a related discipline.
• Strong understanding of security incidents, vulnerabilities, controls, threat scenarios, and technical risk.
• Demonstrated experience facilitating root-cause analyses or post-incident reviews.
• Ability to translate complex technical findings into clear business risks, decisions, and actions.
• Strong program-management skills, including ownership tracking, prioritization, dependency management, and executive communication.
• Ability to work effectively across engineering, operations, product, legal, compliance, and leadership teams.
• Excellent written and verbal communication skills.
• Sound judgment and the ability to challenge incomplete analyses or insufficient remediation constructively.

Responsibilities

• Own the end-to-end security problem management lifecycle, from problem identification through closure and effectiveness validation.
• Identify recurring incidents, control failures, vulnerabilities, and operational trends that require deeper investigation.
• Facilitate root-cause analyses and post-incident reviews using structured methods such as five whys, fault-tree analysis, and causal analysis.
• Create and maintain high-quality problem records containing impact, contributing factors, root cause, risk, corrective actions, owners, and deadlines.
• Distinguish root causes from symptoms and ensure remediation addresses systemic weaknesses.
• Partner with incident response teams to transition significant incidents into formal problem investigations.
• Track corrective and preventive actions to completion, escalating overdue or blocked work when necessary.
• Validate that remediation is effective and has not merely transferred risk to another system or team.
• Analyze incident, vulnerability, and control-failure data to identify emerging patterns and systemic risks.
• Develop metrics and reporting for senior leadership, including recurrence rates, remediation aging, overdue actions, and risk reduction.
• Improve problem-management processes, standards, templates, tooling, and governance.
• Promote blameless reviews that encourage transparency, learning, and sustainable engineering improvements.
• Maintain alignment with security policies, risk-management requirements, and relevant regulatory obligations.

Skills

Cybersecurity

Security operations

Incident response

Problem management

Risk management

Program management

Executive communication

Cross-functional collaboration

Job description

Salesforce is seeking an experienced Security Problem Management Principal to lead the end-to-end lifecycle of security problems, from detection to remediation, across Security, Engineering, Infrastructure, Product, and Risk teams. You will drive root-cause analyses, establish high-quality problem records, and ensure systemic fixes address underlying weaknesses.

You will partner with incident response and risk teams to translate technical findings into actionable business risk assessments,