Security Problem Manager: Root-Cause & Risk Reduction Lead

salesforce.com, inc.; McLean (VA); On-site; USD 197,000 - 314,000; Full time

Job summary

Salesforce is seeking a seasoned Security Problem Management professional to lead the end-to-end lifecycle of security issue handling, from identification to validated closure. You will collaborate with Security, Engineering, Infrastructure, Product, and Risk teams to diagnose root causes and drive systemic remediation.

The role emphasizes blameless learning, executive communication, and measurable risk reduction.

Qualifications

• The candidate demonstrates deep cybersecurity knowledge and a strong understanding of security incidents, vulnerabilities, controls, threat scenarios, and technical risk.
• Experience facilitating root-cause analyses or post-incident reviews is required.
• Ability to translate complex technical findings into clear business risks, decisions, and actions.
• Strong program-management skills including ownership tracking, prioritization, dependency management, and executive communication.
• Ability to work effectively across engineering, operations, product, legal, compliance, and leadership teams.
• Excellent written and verbal communication skills, with a focus on blameless learning and accountability.

Responsibilities

• Own the end-to-end security problem management lifecycle from identification to closure and effectiveness validation.
• Identify recurring incidents, control failures, vulnerabilities, and operational trends requiring deeper investigation.
• Facilitate root-cause analyses and post-incident reviews using structured methods.
• Create and maintain high-quality problem records with impact, root cause, risk, actions, owners, and deadlines.
• Distinguish root causes from symptoms and ensure remediation addresses systemic weaknesses.
• Partner with incident response teams to transition significant incidents into formal problem investigations.
• Track corrective and preventive actions to completion and escalate overdue or blocked work.
• Validate remediation effectiveness and ensure risk is not merely transferred elsewhere.
• Analyze incident, vulnerability, and control-failure data to identify patterns and systemic risks.
• Develop metrics and reporting for senior leadership on recurrence, aging, overdue actions, and risk reduction.
• Improve problem-management processes, standards, tooling, and governance.
• Promote blameless reviews that encourage transparency, learning, and sustainable engineering improvements.
• Maintain alignment with security policies, risk-management requirements, and regulatory obligations.

Skills

Cybersecurity

Security operations

Incident response

Problem management

Risk management

Reliability engineering

Executive communication

Stakeholder management

Job description

Salesforce is seeking a seasoned Security Problem Management professional to lead the end-to-end lifecycle of security issue handling, from identification to validated closure. You will collaborate with Security, Engineering, Infrastructure, Product, and Risk teams to diagnose root causes and drive systemic remediation.

The role emphasizes blameless learning, executive communication, and measurable risk reduction.