Senior Security Analyst (Hybrid) - Threat Detection & IR

Salesloft, Inc.; United States; Hybrid; USD 32,000 - 48,000; Full time

Job summary

Salesloft seeks a Senior Security Analyst to join the Security Operations team in a hybrid Guadalajara office. You will escalate complex alerts, lead incident response, and develop detections across endpoint, IAM, network, and cloud security.

You will automate playbooks, mentor colleagues, and drive vulnerability remediation with IT partners. The role emphasizes collaboration, strong communications, and a proactive security posture within a fast-paced SaaS environment.

Qualifications

• 5 to 7 years of experience in Information Security, Security Operations (SOC), Incident Response, Detection Engineering, or a related technical analysis role within a SaaS or cloud-native environment.
• Demonstrated experience leading complex incident investigations end to end, including scoping, containment, root-cause analysis, and post-incident reporting.
• Deep expertise in core security domains, including endpoint protection, IAM, network security, cloud security, and email security/phishing analysis.
• Advanced hands-on experience with SIEM platforms and EDR tools (e.g., CrowdStrike, SentinelOne), including writing queries and detection logic (e.g., SPL, KQL, SQL, or similar).
• Strong working knowledge of common attack vectors, web vulnerabilities (OWASP Top 10), and advanced incident response procedures.
• Solid analytical and problem-solving skills with a high attention to detail when investigating logs and anomalous activity.
• Proficiency in scripting or automation (e.g., Python, PowerShell, Bash) and experience with SOAR or workflow automation.
• Proven ability to mentor and coach less experienced analysts.
• Excellent written and verbal communication skills to explain technical issues clearly to both technical and non-technical team members.

Responsibilities

• Lead Threat Detection & Investigation: Escalation point for complex/high-fidelity alerts from SIEM/EDR/cloud monitoring platforms and conduct deep-dive investigations.
• Own Incident Response: Lead response for medium-severity incidents, support Incident Commander on critical events, drive containment and recovery.
• Engineer & Tune Detections: Develop/test/tune detection rules and use cases mapped to MITRE ATT&CK, reduce false positives.
• Automate & Improve Operations: Build/run playbooks and SOAR automations; report on SOC metrics (MTTD, MTTR, alert quality).
• Drive Risk-Based Vulnerability Management: Prioritize vulnerabilities by exploitability and business impact; coordinate remediation with IT/Engineering.
• Mentor & Elevate the Team: Coach junior analysts and contribute to training and onboarding.

Skills

Incident response

Threat detection

SOC operations

SIEM/EDR

Scripting (Python)

Mentoring

Communication skills

Tools

CrowdStrike

SentinelOne

SPL

KQL

SQL

Job description

Salesloft seeks a Senior Security Analyst to join the Security Operations team in a hybrid Guadalajara office. You will escalate complex alerts, lead incident response, and develop detections across endpoint, IAM, network, and cloud security.

You will automate playbooks, mentor colleagues, and drive vulnerability remediation with IT partners. The role emphasizes collaboration, strong communications, and a proactive security posture within a fast-paced SaaS environment.