Senior Security Analyst

Salesloft, Inc.; United States; Hybrid; USD 32,000 - 48,000; Full time

Job summary

Salesloft seeks a Senior Security Analyst to join the Security Operations team in a hybrid Guadalajara office. You will escalate complex alerts, lead incident response, and develop detections across endpoint, IAM, network, and cloud security.

You will automate playbooks, mentor colleagues, and drive vulnerability remediation with IT partners. The role emphasizes collaboration, strong communications, and a proactive security posture within a fast-paced SaaS environment.

Qualifications

• 5 to 7 years of experience in Information Security, Security Operations (SOC), Incident Response, Detection Engineering, or a related technical analysis role within a SaaS or cloud-native environment.
• Demonstrated experience leading complex incident investigations end to end, including scoping, containment, root-cause analysis, and post-incident reporting.
• Deep expertise in core security domains, including endpoint protection, IAM, network security, cloud security, and email security/phishing analysis.
• Advanced hands-on experience with SIEM platforms and EDR tools (e.g., CrowdStrike, SentinelOne), including writing queries and detection logic (e.g., SPL, KQL, SQL, or similar).
• Strong working knowledge of common attack vectors, web vulnerabilities (OWASP Top 10), and advanced incident response procedures.
• Solid analytical and problem-solving skills with a high attention to detail when investigating logs and anomalous activity.
• Proficiency in scripting or automation (e.g., Python, PowerShell, Bash) and experience with SOAR or workflow automation.
• Proven ability to mentor and coach less experienced analysts.
• Excellent written and verbal communication skills to explain technical issues clearly to both technical and non-technical team members.

Responsibilities

• Lead Threat Detection & Investigation: Escalation point for complex/high-fidelity alerts from SIEM/EDR/cloud monitoring platforms and conduct deep-dive investigations.
• Own Incident Response: Lead response for medium-severity incidents, support Incident Commander on critical events, drive containment and recovery.
• Engineer & Tune Detections: Develop/test/tune detection rules and use cases mapped to MITRE ATT&CK, reduce false positives.
• Automate & Improve Operations: Build/run playbooks and SOAR automations; report on SOC metrics (MTTD, MTTR, alert quality).
• Drive Risk-Based Vulnerability Management: Prioritize vulnerabilities by exploitability and business impact; coordinate remediation with IT/Engineering.
• Mentor & Elevate the Team: Coach junior analysts and contribute to training and onboarding.

Skills

Incident response

Threat detection

SOC operations

SIEM/EDR

Scripting (Python)

Mentoring

Communication skills

Tools

CrowdStrike

SentinelOne

SPL

KQL

SQL

Job description

Job Title: Senior Security Analyst

Location: Guadalajara / Hybrid

Mexico Hybrid role, ” This is a hybrid position, which will require the ability to be onsite in our Guadalajara, Mexico office as needed. Candidates must be based in Guadalajara.

ABOUT THE COMPANY:

Salesloft are building the next era of enterprise revenue — one where teams make confident decisions powered by AI and real signals. By combining our scale, insights, and AI innovation, we’re building the industry’s first Predictive Revenue System, enabling humans and AI to work together to make smarter decisions and drive consistent growth.

With thousands of customers using our platforms every day, we have an unmatched view into how revenue is actually won — the Revenue Context that reveals what happens, when, and with what outcome. This gives us a unique opportunity to transform an entire category and set a new benchmark for how modern revenue teams operate.

Join us to help transform how companies around the world run revenue — and build the platform that will guide leading revenue teams into the future.

THE OPPORTUNITY:

At Salesloft, our Senior Security Analyst will be pivotal to our company’s success. You will be a senior member of our fast-growing and high-performing Security Operations team, serving as an escalation point for complex security events across our cloud and enterprise environments and raising the quality of how we detect, investigate, and respond to threats. We believe an uncompromised security posture relies on sharp, experienced analysts who can lead through ambiguity, sharpen our detection capabilities, and develop the next generation of defenders.

On a day-to-day basis, you will be responsible for monitoring security alerts, investigating potential incidents, handling daily security support tickets, and maintaining our security tooling baseline. Specifically, you will:

• Lead Threat Detection & Investigation: Serve as the escalation point for complex and high-fidelity alerts from our SIEM, EDR/XDR, and cloud monitoring platforms. Conduct deep-dive investigations across endpoint, identity, network, and cloud telemetry to determine scope and root cause.
• Own Incident Response: Lead response for medium-severity incidents and support the Incident Commander on critical events. Drive containment, eradication, and recovery, and own post-incident reviews and corrective actions.
• Engineer & Tune Detections: Develop, test, and tune detection rules and use cases, mapped to MITRE ATT&CK. Reduce false positives and close visibility gaps through threat-informed analysis.
• Automate & Improve Operations: Build and refine playbooks, runbooks, and SOAR automations to reduce manual toil and improve response times. Define and report on SOC metrics (e.g., MTTD, MTTR, alert quality).
• Drive Risk-Based Vulnerability Management: Prioritize vulnerabilities by exploitability and business impact,, triaging findings and partnering with IT and Engineering leaders to drive timely remediation.
• Manage Security Requests: Handle incoming day-to-day security tickets, such as access reviews, phishing investigations, software security assessments, and employee security inquiries. Provide clear guidance and risk context to technical and executive stakeholders.
• Promote Security Awareness: Assist with running internal phishing simulations, updating security documentation, and educating employees on best practices for safe computing.
• Mentor & Elevate the Team: Coach junior analysts through investigations, review their work, and contribute to training, documentation, and onboarding.

In addition to working with amazing colleagues who exemplify our ‘team over self’ core value, you will also have the opportunity to shape the direction of our security operations program while protecting an industry-leading enterprise SaaS platform trusted by global organizations. You will have an opportunity to make a difference.

WHAT WE’RE LOOKING FOR:

We are seeking an experienced, self-directed security professional who thrives on complex investigations and takes ownership of outcomes. You bring deep technical judgment, a track record of improving security operations, and the ability to mentor others and influence across teams in a fast-paced cloud environment. If you’re looking for an opportunity to lead, scale your impact, and help build a world-class security program, then becoming a Senior Security Analyst is the career path for you!

THE TEAM:

Our Salesloft Security Operations team is comprised of seasoned and up-and-coming security analysts, incident responders, and engineers who are all aligned on one vision and mission:

• Vision: Fundamentally transform the way buyers and sellers drive repeatable outcomes
• Mission: Bring science to the art of sales

The Security Operations team consists of results-oriented professionals with a strong passion for threat detection and continuous learning. The team members share a few common traits: they are naturally curious, analytical problem-solvers, deeply collaborative, and dedicated to safeguarding customer trust.

THE SKILL SET:

• 5 to 7 years of experience in Information Security, Security Operations (SOC), Incident Response, Detection Engineering, or a related technical analysis role within a SaaS or cloud-native environment.
• Demonstrated experience leading complex incident investigations end to end, including scoping, containment, root-cause analysis, and post-incident reporting.
• Deep expertise in core security domains, including endpoint protection, identity & access management (IAM), network security, cloud security, and email security/phishing analysis.
• Advanced hands-on experience with SIEM platforms and EDR tools (e.g., CrowdStrike, SentinelOne), including writing queries and detection logic (e.g., SPL, KQL, SQL, or similar)..
• Strong working knowledge of common attack vectors, web vulnerabilities (OWASP Top 10), and advanced incident response procedures.
• Solid analytical and problem-solving skills with a high attention to detail when investigating logs and anomalous activity.
• Proficiency in scripting or automation (e.g., Python, PowerShell, Bash) and experience with SOAR or workflow automation.
• Proven ability to mentor and coach less experienced analysts.
• Excellent written and verbal communication skills to explain technical issues clearly to both technical and non-technical team members.
• Relevant industry certifications (e.g., CompTIA Security+, CySA+, GSEC, or GIAC) are a plus.
• Collaborative mentality by prioritizing ‘we’ and not focusing on ‘me’.

At Salesloft, we are committed to creating an inclusive and supportive workplace where everyone belongs and can thrive. We focus on culture add, not culture fit, and believe our teams are made stronger by the unique perspectives, experiences, and identities each person brings.

We are proud to be an Equal Opportunity Employer and provide employment opportunities to all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, pregnancy, or any other characteristic protected by law.

#LI-Hybrid

Please note that all official communication regarding job opportunities at Salesloft will come from an @ salesloft.com email address. If you receive messages on LinkedIn or other job platforms claiming to be from Salesloft, they may not be legitimate. To verify the authenticity of any job-related communication, please visit our official Careers Page.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, notetaking, or summarizing responses. These tools assist our recruitment team but do not replace human judgment — all hiring decisions are made by people. If you would like more information about how your data is processed or prefer to opt out of any AI-assisted tools, please let your recruiter know. Opting out will not impact your experience or consideration.