Systems Engineering Senior Associate, CSIRT (TS/SCI Clearance)

Salesforce, Inc.; Herndon (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Salesforce, Inc. in Northern Virginia is seeking an Incident Response Analyst to join the Government Cloud Security Operations team on-site. This role focuses on real-time security monitoring, incident handling, and supporting national security requirements within SNS Cloud environments.

You will investigate cyber events, coordinate across teams, and leverage a range of security disciplines. This position may involve on-call shifts and collaboration with government customers.

Responsibilities

• The Incident Response Analyst will respond to and investigate cyber security events within the SNS Cloud environments, track and document security events and incidents in a ticketing system, and analyze log data for signs of malicious activity in a SIEM.
• The Analyst will need to work across multi-disciplined teams to coordinate incident response actions for high-priority, high-transparency operations security issues to drive toward a resolution while meeting required service-level agreements, escalating as appropriate, and providing regular updates to senior leaders.
• This position offers a challenging opportunity to be exposed to a diverse set of security disciplines, including incident response, forensics, reverse engineering, malware analysis, intrusion detection, network security, and system security.
• This position provides opportunities to automate workflows and processes, develop new analytics and apply mitigations for adversary TTPs, and hunt for undetected indicators of compromise.
• This position may require you to provide periods of 24x7 on-call support on an as-needed basis.
• As we work with Government customers,

Job description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Software Engineering

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

The Experience

This is a customer-facing role and will require you to be on-site in Northern Virginia. This is NOT a remote position.

Salesforce - the leader in enterprise cloud computing and one of the top 10 places to work according to Fortune magazine - is seeking an Incident Response Analyst for our Government Cloud Security Operations team.

As part of the Salesforce National Security (SNS) Infrastructure Security Team, the Incident Response Analyst will work on the 'front lines' of Salesforce environments supporting US Government agencies and departments performing national security functions. The Infrastructure Security Team, protects our critical infrastructure and our customers' data from the latest information security threats. The team is responsible for 24x7x365 security monitoring, security operations, real-time analysis of security alert data, and rapid incident response across SNS Cloud environments.

PLEASE NOTE: Qualification for this job is contingent upon acceptable results from a background investigation as well as your having and maintaining the specific level of U.S. government background investigation and clearance required for this role.

What You'll Actually Be Doing

• The Incident Response Analyst will respond to and investigate cyber security events within the SNS Cloud environments, track and document security events and incidents in a ticketing system, and analyze log data for signs of malicious activity in a Security Information and Event Manager (SIEM).
• The Analyst will need to work across multi-disciplined teams to coordinate incident response actions for high-priority, high-transparency operations security issues to drive toward a resolution while meeting required service-level agreements, escalating as appropriate, and providing regular updates to senior leaders.
• This position offers a challenging opportunity to be exposed to a diverse set of security disciplines, including incident response, forensics, reverse engineering, malware analysis, intrusion detection, network security, and system security.
• This position provides opportunities to automate workflows and processes, develop new analytics and apply mitigations for adversary Tactics, Techniques, and Procedures (TTPs), and hunt for undetected indicators of compromise.
• This position may require you to provide periods of 24x7 on-call support on an as-needed basis.
• As we work with Government customers,