Senior Incident Responder - Global CSIRT & Automation

Salesforce; North Dakota; On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce is seeking a Senior Incident Responder for its CSIRT team. You will investigate and respond to security incidents end to end, take the lead on major events, and help improve playbooks and automation across on‑premises and cloud environments.

You will mentor newer analysts, contribute to threat intelligence, and participate in on‑call rotations as needed, while maintaining clear communication with technical and non‑technical stakeholders.

Qualifications

• 5+ years in information security and incident response.
• Hands-on host and network forensics across Windows/macOS/Linux.
• Experience handling incidents in cloud environments (AWS/Azure/GCP).

Responsibilities

• Investigate security incidents end-to-end, triage and contain threats.
• Lead on high-severity events and coordinate with senior responders.
• Improve playbooks, detections, and automation to speed response.
• Document incidents clearly and mentor junior analysts.

Skills

Incident response

Forensics

Cloud security

Threat hunting

Education

SANS/GIAC certifications

Tools

SOAR tooling

MITRE ATT&CK

AWS/Azure/GCP

Job description

Salesforce is seeking a Senior Incident Responder for its CSIRT team. You will investigate and respond to security incidents end to end, take the lead on major events, and help improve playbooks and automation across on‑premises and cloud environments.

You will mentor newer analysts, contribute to threat intelligence, and participate in on‑call rotations as needed, while maintaining clear communication with technical and non‑technical stakeholders.