Senior CSIRT Incident Response Engineer – Onsite VA

Leadout Capital; Herndon (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Salesforce is seeking an Incident Response Analyst for its Government Cloud Security Operations team in Northern Virginia. This on-site role involves real-time monitoring, incident response, and collaboration with the SNS Infrastructure Security Team to protect US government cloud environments.

You will work on high-priority security events, document findings, and coordinate across cross-functional teams, with potential 24x7 on-call support and occasional travel to customer sites.

Qualifications

• U.S. citizen with active TS/SCI clearance with Polygraph.
• Related technical degree in CS, software engineering, cybersecurity, information assurance, or equivalent work experience.
• 2+ years of experience in cybersecurity, engineering, or incident response.
• Strong interpersonal and communication skills for coordinating responses to incidents with multiple stakeholders.
• Experience with cloud and security tools such as AWS, Splunk, Azure Sentinel, ElasticStack preferred.

Responsibilities

• Respond to and investigate cyber security events within SNS Cloud environments.
• Track and document security events in a ticketing system and analyze SIEM data.
• Coordinate incident response actions across multi-disciplined teams and provide updates to senior leaders.
• Develop analytics, automate workflows, and apply mitigations for attacker TTPs.
• May require 24x7 on-call support on an as-needed basis.
• Occasional local travel to government customer sites.

Skills

Incident response

Security operations

Communication

Threat analysis

Cloud security

Education

Related technical degree

Tools

AWS Cloud

Splunk

Azure Sentinel

ElasticStack

Job description

Salesforce is seeking an Incident Response Analyst for its Government Cloud Security Operations team in Northern Virginia. This on-site role involves real-time monitoring, incident response, and collaboration with the SNS Infrastructure Security Team to protect US government cloud environments.

You will work on high-priority security events, document findings, and coordinate across cross-functional teams, with potential 24x7 on-call support and occasional travel to customer sites.