Computer Security Incident Report Analyst

Salesforce

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Herndon, VA
Employment
Full-time
Posted
99 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $150k
$108k $193k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $122,275–$177,250.

Based on 240 similar postings.

Employer

About Salesforce

Salesforce is the world''s leading customer relationship management (CRM) platform, offering cloud-based software for sales, service, marketing, analytics, and application development. Industry: Enterprise Software & Cloud Computing

Salesforce currently has 221 open roles on FindRole.

Listed pay typically runs $148,500–$260,100 across 125 roles with salary data.

Most-posted roles

View all roles at Salesforce

At a glance

TL;DR · Computer Security Incident Report Analyst

JOB TITLE: Computer Security Incident Report Analyst with TS/SCI Clearance [Salesforce National Security] The Computer Security Incident Report Analyst joins the Government Cloud Security Operations team within the Salesforce National Security Infrastructure Security Team. This role involves responding to and investigating cyber security events across SNS Cloud environments to protect critical infrastructure and customer data. Day-to-day responsibilities include tracking incidents in ticketing systems, analyzing log data for malicious activity in a SIEM, and coordinating multi-disciplined response actions for high-priority operations security issues. The analyst will utilize tools such as Splunk, Azure Sentinel, ElasticStack, and Grafana while applying skills in SQL, Python, and Bash. Key technical competencies include forensics, malware analysis, and network security across AWS, Azure, and GCP. The role addresses the business problem of defending national security functions against sophisticated information security threats and adversary tactics.

What you'll do

  • Respond to and investigate cyber security events within the SNS Cloud environments.
  • Track and document security events and incidents in a ticketing system.
  • Analyze log data for signs of malicious activity in a Security Information and Event Manager (SIEM).
  • Coordinate incident response actions with multi-disciplined teams to resolve high-priority security issues.
  • Provide regular updates to senior leaders and meet required service-level agreements.
  • Automate workflows and processes to apply mitigations for adversary Tactics, Techniques, and Procedures (TTPs).
  • Hunt for undetected indicators of compromise within the infrastructure.
  • Provide 24x7 on-call support on an as-needed basis.

What we're looking for

  • Must be a U.S. citizen (born or naturalized) who does not hold dual citizenship.
  • Must have an active U.S. Government Top Secret/SCI security clearance with Polygraph.
  • Must be able to complete a U.S. federal government Minimum Background Investigation (MBI).
  • Must have a related technical degree in Computer Science, Software Engineering, Cybersecurity, Information Assurance, or equivalent work experience.
  • Must have 2+ years of experience in cybersecurity, engineering, and/or incident response roles.
  • Must possess strong interpersonal and communication skills for coordinating responses with technical and non-technical stakeholders.
  • Must have a technical understanding of the information security threat landscape, TCP/IP protocols, and cloud environment security controls.
  • Experience with AWS Cloud, Splunk, Azure Sentinel, or ElasticStack is preferred.

More like this

Similar roles

Senior Incident Response Analyst, InfoSec

Elastic

8 days ago $133,100–$210,600
Elastic Stack SIEM Incident Response CI/CD SaaS AI ML System Administration SRE Threat Detection Security Operations DoD Impact Level 5
3+ yrs exp

Senior Cybersecurity Analyst, Cyber Threat Intelligence

Target

Remote (Brooklyn Park, MN) 19 days ago $88,000–$158,000
Cyber Threat Intelligence MITRE ATT&CK Cyber Kill Chain Diamond Model VirusTotal VMRay DomainTools URLScan Maltego Analyst Notebook Malware Analysis Threat Hunting Incident Response Structured Analytic Techniques Infrastructure Analysis Indicator Development
3+ yrs exp Remote

Security Operations Center Analyst

Booz Allen Hamilton

Columbia, MD 45 days ago
Splunk SIEM Incident Response Linux Nix CLI Bro Zeek Suricata Snort Nessus Firewall SOAR Splunk Phantom Threat Intelligence AI Fundamentals
2+ yrs exp

Senior Security Analyst, Threat Detection

SpaceX

Redmond, WA 12 days ago $130,000–$195,000
Incident Response SIEM Splunk Elastic TTPs Network Forensics Reverse Engineering Cloud Security Linux Windows macOS Scripting SOC C2 Exploitation
5+ yrs exp