Senior Security Problem Management Leader

Salesforce; Virginia (IL); On-site; USD 140,000 - 180,000; Full time

Job summary

Salesforce is seeking a Security Problem Manager to lead end-to-end problem management for security incidents, vulnerabilities, and control failures. The role collaborates across Security, Engineering, Infrastructure, Product, and Risk to drive root-cause analyses and durable remediation.

The ideal candidate has 10+ years in cybersecurity or related fields, strong program-management skills, and the ability to translate technical risk into business actions. U.S.

Qualifications

• 10+ years of experience in cybersecurity, security operations, incident response, problem management, risk management, reliability engineering, or a related discipline.
• Strong understanding of security incidents, vulnerabilities, controls, threat scenarios, and technical risk.
• Demonstrated experience facilitating root-cause analyses or post-incident reviews.
• Ability to translate complex technical findings into clear business risks, decisions, and actions.
• Strong program-management skills, including ownership tracking, prioritization, dependency management, and executive communication.
• Ability to work effectively across engineering, operations, product, legal, compliance, and leadership teams.
• Excellent written and verbal communication skills.
• Sound judgment and the ability to challenge incomplete analyses or insufficient remediation constructively.

Responsibilities

• Own the end-to-end security problem management lifecycle, from problem identification through closure and effectiveness validation.
• Identify recurring incidents, control failures, vulnerabilities, and operational trends that require deeper investigation.
• Facilitate root-cause analyses and post-incident reviews using structured methods such as five whys, fault-tree analysis, and causal analysis.
• Create and maintain high-quality problem records containing impact, contributing factors, root cause, risk, corrective actions, owners, and deadlines.
• Distinguish root causes from symptoms and ensure remediation addresses systemic weaknesses.
• Partner with incident response teams to transition significant incidents into formal problem investigations.
• Track corrective and preventive actions to completion, escalating overdue or blocked work when necessary.
• Validate that remediation is effective and has not merely transferred risk to another system or team.
• Analyze incident, vulnerability, and control-failure data to identify emerging patterns and systemic risks.
• Develop metrics and reporting for senior leadership, including recurrence rates, remediation aging, overdue actions, and risk reduction.
• Improve problem-management processes, standards, templates, tooling, and governance.
• Promote blameless reviews that encourage transparency, learning, and sustainable engineering improvements.
• Maintain alignment with security policies, risk-management requirements, and relevant regulatory obligations.

Skills

Cybersecurity

Incident response

Problem management

Program management

Executive communication

Cross-functional collaboration

Risk assessment

Tools

NIST CSF

NIST 800-61

ISO 27001

ITIL

PMP

Job description

Salesforce is seeking a Security Problem Manager to lead end-to-end problem management for security incidents, vulnerabilities, and control failures. The role collaborates across Security, Engineering, Infrastructure, Product, and Risk to drive root-cause analyses and durable remediation.

The ideal candidate has 10+ years in cybersecurity or related fields, strong program-management skills, and the ability to translate technical risk into business actions. U.S.