Salesforce

Senior Incident Responder, Global CSIRT

Salesforce • $148K — $223K *
Mclean, VA 22101In-Person
Information Technology
5 - 7 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • 5+ years in information security with a focus on operational security monitoring and incident response.
  • Proficient in host and network forensics across Windows, macOS, and Linux, including cloud environments.
  • Experience handling high-priority incidents and understanding of threat landscapes and TTPs.
  • Strong written and verbal communication skills, with the ability to document incidents effectively.

Responsibilities

  • Investigate and respond to security incidents end to end, taking lead on many cases.
  • Analyze adversary activity, insider threats, and web application attacks in diverse environments.
  • Enhance processes, playbooks, and automation tools to improve detection and response times.
  • Prepare incident documentation and status updates for various stakeholders, mentoring new team members.
  • Support the team’s on-call rotation, which may include occasional overnight or weekend shifts.

Benefits

  • Hands-on technical role within a dedicated security team.
  • Opportunities for mentorship and professional growth toward a lead role.
  • Focus on process improvements and automation for enhanced team efficiency.
  • Potential for specialization in areas like cloud security or threat analysis.
Full Job Description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Enterprise Technology & Infrastructure

Job Details

The Experience

Salesforce's Computer Security Incident Response Team (CSIRT) provides 24x7x365 security monitoring and rapid incident response across every Salesforce environment, protecting company and customer data from adversaries.

As a Senior Incident Responder, you'll be a core member of the response team — investigating and handling security incidents end to end, taking a lead role on many of them, and escalating to Lead Incident Responders on the most severe or ambiguous events. You'll also help improve the playbooks, detections, and automation that make the team faster, and mentor newer analysts as you grow toward a lead role yourself.

This is a hands-on technical role focused on the detailed work of incident response.

What You'll Actually Be Doing
  • Investigate and respond to security incidents end to end — triage, containment, eradication, recovery, and post-incident review — taking point on many incidents and supporting Lead Incident Responders on the highest-severity, highest-visibility events.
  • Investigate adversary activity, insider threats, and web application attacks across on-premises and multi-cloud environments.
  • Contribute to process improvements, playbooks, and automation — including Security Orchestration, Automation, and Response (SOAR) tooling and detection-as-code — that reduce time-to-detect and time-to-respond, and support strategic projects expanding detection and response capabilities.
  • Produce clear incident documentation and status updates for technical and non-technical stakeholders, mentor newer incident responders, and support the team's on-call rotation (core hours 10:30 AM–6:30 PM ET, Monday–Friday, with occasional overnight/weekend on-call as needed).


You're Our Person If...
  • You have 5+ years in information security, including hands-on operational security monitoring and incident response.
  • You can perform host and network forensics across Windows, macOS, and Linux — analyzing file system, memory, process, and network artifacts for indicators of compromise — and have responded to incidents in cloud environments (AWS, Azure, and/or GCP), including familiarity with cloud architectures, CI/CD (continuous integration/continuous delivery) pipelines, and cloud logging/telemetry.
  • You've handled high-priority incidents, including insider investigations, adversary activity, and web application attacks, and have a solid, current understanding of the threat landscape — attacker tactics, techniques, and procedures (TTPs), tooling, and hardening best practices — including working knowledge of a framework such as MITRE ATT&CK.
  • You communicate clearly in writing and verbally, document incidents effectively, and build trusted relationships with peers inside and outside your team.


Even Better If...
  • You're developing depth in a specialty — malware analysis, detection engineering, forensics, cloud security, offensive security, or applied AI/ML for security.
  • You have prior experience in a 24x7x365 security operations environment, and have improved team capability through automation and tool development.
  • You hold relevant certifications: SANS GCIH, GCFA, GCFE, GNFA, GPEN, GREM, or Offensive Security OSCP.
  • You have experience applying AI and LLMs to SOC operations — AI-powered tooling, LLM-assisted threat analysis, and AI-driven detection — and a strong understanding of the Salesforce platform and its SaaS offerings.

This candidate must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship and agrees to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.

About Salesforce

ExactTarget is a provider of on-demand email marketing software solutions. Their suite of on-demand one-to-one marketing applications enables clients to send business-critical and event-triggered communications to increase sales, optimize marketing investments, and strengthen customer relationships. They offer four editions of their on-demand software application along with integrated solutions such as ExactTarget for AppExchange and ExactTarget for [Microsoft](/organization/Microsoft) Dynamics CRM.

Salesforce Careers

Joining Salesforce means becoming part of a dynamic, global team of professionals who are deeply committed to driving customer success and innovation. As the world's leading Customer Relationship Management (CRM) platform, Salesforce offers unparalleled job opportunities in technology and consulting, making it an ideal place for ambitious individuals looking to make a significant impact.

Work You'll Do

At Salesforce, every position is a chance to leverage your skills and creativity to transform businesses and industries. Our diverse team of experts collaborates to deliver cutting-edge solutions that foster growth and enhance leadership capabilities. By joining our team, you'll be at the forefront of digital innovation, using Salesforce's powerful platform to help clients navigate their transformation journeys.

Innovate and Lead

Salesforce is not just a company; it's a community where you can lead with your ideas and see them come to life. Our culture of innovation encourages you to challenge the status quo and push the boundaries of what's possible. With Salesforce, you'll work alongside leaders in technology and business who are committed to your growth and professional development.

Career Growth and Opportunities

Whether you're looking for an internship, a full-time position, or leadership roles, Salesforce provides a wealth of opportunities to advance your career. Our commitment to professional growth is reflected in our robust training programs, including leadership development and diversity training, designed to help you excel at every stage of your career.

Be Part of a Great Team

Salesforce prides itself on a culture that values diversity, teamwork, and open communication. We believe that our strength lies in our people, and we're committed to creating an environment where everyone can thrive. Joining our team means being part of a supportive community that encourages networking and collaboration.

Benefits and Culture

At Salesforce, we understand that job satisfaction extends beyond the office. That's why we offer competitive benefits to support the health, well-being, and financial security of our employees and their families. From health insurance and retirement plans to wellness programs and flexible working arrangements, we provide the benefits that contribute to a better work-life balance.

Explore Job Opportunities

Ready to take the next step in your career? Explore the wide range of employment opportunities at Salesforce. From technical roles to customer engagement positions, we are continuously hiring talented individuals who are passionate about making a difference.

Stay Connected

Keep up to date with the latest at Salesforce by following our careers blog. Gain insights from the people who work here and learn how you can bring your career to the next level with Salesforce.

Apply Now

Are you ready to join a company that's leading the way in CRM technology? Search open positions that match your skills and interests on our careers page. Tailor your resume, prepare for your interview, and take the first step towards a rewarding career at Salesforce.

SEARCH SALESFORCE JOBS

Join Salesforce today and be part of a company that's shaping the future of technology, fostering a culture of innovation, and building a more equitable world.
Learn more about Salesforce
Size
73,541 employees
Market Cap
$130.4 billion
Industry
Enterprise Technology
Net Income
$4 billion
Founded
2000
5 Year Trend
+25.7%
Revenue
$21.2 billion
NASDAQ
CRM
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Salesforce

More Information Technology Jobs

Find similar Senior Incident Responder, Global CSIRT jobs:

NationwideMclean, VA