{"id":3541645,"url":"https://alion.io/job/salesforce-systems-engineering-senior-associate-csirt","title":"Systems Engineering Senior Associate, CSIRT","company":{"id":70,"name":"Salesforce","domain":"salesforce.com","url":"https://alion.io/company/salesforce","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":342,"ghost_share":0.018,"stale_share":0.687,"repost_share":0.041,"time_to_fill_p50_days":31,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Herndon, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":117200,"max":176700,"currency":"USD","period":"year","gross":null,"usd_annual":176700},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentforce","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"Grafana","optional":false},{"name":"GraphQL","optional":false},{"name":"Kibana","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"TCP/IP","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-30T19:26:54Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-03T10:24:52Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.\nJob Category\nSoftware EngineeringJob Details\nAbout Salesforce\nSalesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword - it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.\nReady to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.\nThe Experience\nThis is a customer-facing role and will require you to be on-site in Northern Virginia. This is NOT a remote position.\nSalesforce - the leader in enterprise cloud computing and one of the top 10 places to work according to Fortune magazine - is seeking an Incident Response Analyst for our Government Cloud Security Operations team.\nAs part of the Salesforce National Security (SNS) Infrastructure Security Team, the Incident Response Analyst will work on the 'front lines' of Salesforce environments supporting US Government agencies and departments performing national security functions. The Infrastructure Security Team, protects our critical infrastructure and our customers' data from the latest information security threats. The team is responsible for 24x7x365 security monitoring, security operations, real-time analysis of security alert data, and rapid incident response across SNS Cloud environments.\nPLEASE NOTE: Qualification for this job is contingent upon acceptable results from a background investigation as well as your having and maintaining the specific level of U.S. government background investigation and clearance required for this role.\nWhat You'll Actually Be Doing\nThe Incident Response Analyst will respond to and investigate cyber security events within the SNS Cloud environments, track and document security events and incidents in a ticketing system, and analyze log data for signs of malicious activity in a Security Information and Event Manager (SIEM).\nThe Analyst will need to work across multi-disciplined teams to coordinate incident response actions for high-priority, high-transparency operations security issues to drive toward a resolution while meeting required service-level agreements, escalating as appropriate, and providing regular updates to senior leaders.\nThis position offers a challenging opportunity to be exposed to a diverse set of security disciplines, including incident response, forensics, reverse engineering, malware analysis, intrusion detection, network security, and system security.\nThis position provides opportunities to automate workflows and processes, develop new analytics and apply mitigations for adversary Tactics, Techniques, and Procedures (TTPs), and hunt for undetected indicators of compromise.\nThis position may require you to provide periods of 24x7 on-call support on an as-needed basis.\nAs we work with Government customers, this position may require occasional local travel to customer sites.\n You're Our Person If...\nThe candidate must be a U.S. citizen and must have an active U.S. Government Top Secret/SCI security clearance with Polygraph.\nA related technical degree, such as Computer Science, Software Engineering, Cybersecurity, Information Assurance, or equivalent work experience.\n2+ years experience in cybersecurity, engineering, and/or incident response roles.\nStrong interpersonal and communication skills required for coordinating responses to sophisticated incidents across the organization with many non technical and technical stakeholders.\nStrong problem solving ability to determine solutions to encountered or anticipated challenges.\nStrong technical understanding of the information security threat landscape (attack vectors and tools, best practices for securing systems and networks, etc.).\nExperience with AWS Cloud, Splunk, Azure Sentinel, or ElasticStack, etc. preferred.\n Even Better If...\nTechnical understanding of the information security threat landscape, to include attack vectors, tools, best practices for securing systems and networks, etc.\nTechnical understanding of TCP/IP network protocols and application layer protocols (e.g., HTTP, SMTP, DNS, etc.).\nFamiliarity with incident response and security operations within cloud environments.\nFamiliarity with Mac OSX, Microsoft Windows, and Linux/Unix system administration and security controls.\nTechnical understanding of AWS, Azure, or GCP administration and security controls.\nExperience creating and managing event and metric dashboards with tools like Splunk, Kibana, Grafana, etc.\nExperience with data query languages, such as SQL, SPL, GraphQL, etc.\nScripting language (i.e. Bash, Python, etc.) and workflow automation experience.\nOperational experience monitoring devices such as network and host-based intrusion detection systems, web application firewalls, database security monitoring systems, firewalls/routers/switches, proxy servers, antivirus systems, file integrity monitoring tools, and operating system logs.\nSystem forensics/investigation skills, including analyzing system artifacts (file system, memory, running processes, network connections) for indicators of infection/compromise.\nRelevant information security certifications, such as CISSP, GCFR, GCIA, GCIH or other related certifications.\nComputer Security Incident Response Analyst\nThis candidate must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship and agrees to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.This position requires a USA TS/SCI with Polygraph security access level.\nThis candidate must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship and agrees to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.This position requires a USA TS/SCI with Polygraph security access level.Unleash Your Potential\nWhen you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance andbe your best, and our AI agents accelerate your impact so you cando your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future - but to redefine what’s possible - for yourself, for AI, and the world.\nAccommodations\nIf you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.\nPlease note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.\nPosting Statement\nSalesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications - without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.\nIn the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.\n\nThe typical base salary range for this position is $117,200 - $176,700 annually. \n\nThe range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.","description_format":"text","description_chars":9570,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Industrial Engineering","AI Agents","Team Communication & Collaboration"],"lifecycle":[{"event":"open","at":"2026-10-30T19:26:54Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":31,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":176700,"is_top_pay":true},"html_url":"https://alion.io/job/salesforce-systems-engineering-senior-associate-csirt","json_url":"https://alion.io/job/salesforce-systems-engineering-senior-associate-csirt.json","meta":{"generated_at":"2026-11-03T12:07:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16731,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":70},"rest":"https://alion.io/mcp/rest/get_company?id=70"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsalesforce-systems-engineering-senior-associate-csirt"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsalesforce-systems-engineering-senior-associate-csirt"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsalesforce-systems-engineering-senior-associate-csirt"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/salesforce-systems-engineering-senior-associate-csirt\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsalesforce-systems-engineering-senior-associate-csirt"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3541645}},{"tool":"search_jobs","arguments":{"company":"salesforce.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3541645},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}