Senior Associate Systems Engineering, CSIRT

Salesforce

Confirmed live today Low trust

Hybrid

Quick summary

Work type: Hybrid
Location: Herndon, VA
Salary: $117,200–$176,700 / yr
Employment: Full-time
Posted: 1 day ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $156k

This role $147k

$109k $196k

below market most similar roles pay here above market

This role pays less than 60% of similar roles. Most pay $124,941–$186,500 — the blue band above. At the midpoint, this role pays about $147k versus about $156k for comparable roles.

Based on 240 similar postings.

Employer

About Salesforce

Salesforce is the world''s leading customer relationship management (CRM) platform, offering cloud-based software for sales, service, marketing, analytics, and application development. Industry: Enterprise Software & Cloud Computing

Salesforce currently has 265 open roles on FindRole.

Listed pay typically runs $148,500–$260,100 across 132 roles with salary data.

Most-posted roles

View all roles at Salesforce

At a glance

TL;DR · Senior Associate Systems Engineering, CSIRT

Role Posting Log in to save

JOB TITLE: Systems Engineering Senior Associate, CSIRT (TS/SCI Clearance) The Systems Engineering Senior Associate, CSIRT joins the National Security Infrastructure Security Team to support US Government agencies performing national security functions. This role involves responding to and investigating cybersecurity events within SNS Cloud environments, tracking incidents in ticketing systems, and analyzing log data for malicious activity using a Security Information and Event Manager. You will coordinate incident response actions across multi-disciplined teams, provide regular updates to senior leaders, and automate workflows to mitigate adversary Tactics, Techniques, and Procedures. Required skills include experience with AWS Cloud, Splunk, Azure Sentinel, or ElasticStack, along with proficiency in SQL, SPL, GraphQL, and scripting languages like Python or Bash. You will apply forensics, reverse engineering, and malware analysis to protect critical infrastructure and customer data from sophisticated information security threats.

Skills

Incident Response SIEM Splunk Azure Sentinel ElasticStack AWS GCP Python Bash SQL SPL GraphQL Kibana Grafana TCP/IP Linux Unix Windows Mac OSX Forensics Malware Analysis Reverse Engineering Intrusion Detection Firewalls DNS HTTP SMTP

What you'll do

Respond to and investigate cybersecurity events within the SNS Cloud environments.
Track and document security events and incidents in a ticketing system.
Analyze log data for signs of malicious activity in a Security Information and Event Manager (SIEM).
Coordinate incident response actions for high-priority operations security issues with multi-disciplined teams.
Provide regular updates to senior leaders and escalate issues as appropriate.
Automate workflows and processes to improve security operations.
Develop new analytics and apply mitigations for adversary Tactics, Techniques, and Procedures (TTPs).
Hunt for undetected indicators of compromise within the cloud environment.

What we're looking for

Must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship.
Must have an active U.S. Government Top Secret/SCI security clearance with Polygraph.
Must be able to complete a U.S. federal government Minimum Background Investigation (MBI).
Must have a related technical degree in Computer Science, Software Engineering, Cybersecurity, Information Assurance, or equivalent work experience.
Must have 2+ years of experience in cybersecurity, engineering, and/or incident response roles.
Must possess strong interpersonal communication skills and strong problem-solving abilities.
Must have a technical understanding of the information security threat landscape, including attack vectors and best practices.
Experience with AWS Cloud, Splunk, Azure Sentinel, or ElasticStack is preferred (preferred).

Save