Lead Incident Responder, CSIRT

Salesforce
Virginia
Workplace: RemoteFull timeUSD 172,500 - 260,100 annuallyFunction: Administration & Executive AssistanceExperience: 8+ yearsSkills: ["Clear communication","Cross-functional collaboration","Technical escalation","Process improvement","Automation"]

Lead incident response for Salesforce’s GovCloud Computer Security Incident Response Team (CSIRT), providing 24x7x365 monitoring and acting as a technical escalation point for high-severity security events. Support the US Federal FedRAMP environment, lead cross-functional investigations into insider threats and advanced adversaries, and improve detection and response through process automation and strategic projects. On-call evenings/weekends are required as needed.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Salesforce
Salesforce
2 days ago

Lead Incident Responder, CSIRT

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Lead incident response for Salesforce’s GovCloud Computer Security Incident Response Team (CSIRT), providing 24x7x365 monitoring and acting as a technical escalation point for high-severity security events. Support the US Federal FedRAMP environment, lead cross-functional investigations into insider threats and advanced adversaries, and improve detection and response through process automation and strategic projects. On-call evenings/weekends are required as needed.
Location: Virginia
Workplace: Remote
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Manage response to high-severity security incidents and serve as a technical escalation point for incident responders.
  • •Lead cross-functional response to high-priority security issues, including insider investigations, advanced adversaries, and web application attacks.
  • •Drive process improvement and automation for detection and incident response capabilities.
  • •Lead strategic projects to enhance detection and response within the FedRAMP GovCloud environment.
  • •Provide on-call support for 24x7x365 operations, including evenings and weekends as needed.

Pay and Benefits

Salary: USD 172,500 - 260,100 annually
Perks:Health InsuranceDentalVisionParental LeaveLife InsuranceDisability Insurance401k

Key Requirements

  • •8+ years of information security experience, including operational security monitoring and incident response.
  • •System forensics and investigation across Windows, Mac OS X, and Linux, analyzing file system, memory, processes, and network connections for indicators of compromise.
  • •Strong technical understanding of the information security threat landscape, including attack vectors, tools, and best practices for securing systems and networks.
  • •Ability to communicate clearly and effectively with executive leadership, verbally and in writing.
  • •Relevant information security certifications (e.g., SANS GCIH, SANS GPEN, SANS GFCA, or Offensive Security OSCP).
Experience:8+ yearsSecurity monitoringIncident responseForensicsFedRAMPCloud security
Skills:Clear communicationCross-functional collaborationTechnical escalationProcess improvementAutomation
Certifications:SANS GCIHSANS GPENSANS GFCAOffensive Security OSCP
Tech Stack:WindowsMac OS XLinuxFile systemMemory analysisNetwork connectionsWindows artifactsAWSAmazon Web ServicesMicrosoft AzureGoogle CloudCI/CDLoggingSOARSecurity orchestration

Eligibility

Nationality:US National
Security Clearance:Moderate Public Trust

Company Brief

Salesforce
Provides a leading cloud-based customer relationship management (CRM) platform with sales, service, marketing, analytics, and integration tools that empower businesses to manage customer relationships and digital transformation at scale.
Industry: SaaS
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 1999
Glassdoor
Glassdoor: 4.1
WebsiteLinkedInGlassdoor