Description
Overview of the Role:
We are seeking a Senior Insider Threat Analyst to join our Insider Threat Program. We're looking for a candidate with proven expertise in detections, hunts, and investigations.
Responsibilities:
Conduct investigations into the most complex and sensitive insider-threat matters across all of Salesforce. You will own the investigation from initial signal through evidence preservation, timeline reconstruction, interview support, documentation, and handoff to partner teams.
Ensure investigative findings are documented in the case management system and investigative reports, as needed
Identify, collect, and analyze technical and non-technical indicators from a variety of sources
Conduct proactive threat hunting operations for insiders and translate the results of those hunts into investigations and high fidelity detections.
Leverage your analytical and technical skills to identify patterns and trends, and make recommendations to enhance detective and preventive controls
Contribute to risk assessments for crown jewel analysis, high-sensitivity roles, M&A activity
Build and maintain relationships with partners across Salesforce
Respond to requests for ad-hoc support, reporting, and research topics from management and stakeholders as required
Required Qualifications:
6 years experience in cybersecurity, incident response, intelligence, insider threat or counterintelligence, with at least X-3 years involving insider threat and/or counterintelligence investigations
Deep knowledge of procedures and indicators of malicious insider threat activity such as fraud, theft, sabotage, espionage, etc.
Proficiency in identifying both cyber, insider, and intelligence threats using a multitude of sources.
Demonstrated experience creating and employing effective strategies at scale
Excellent written and verbal presentation skills with the ability to communicate professionally with team members, stakeholders, and senior leadership, as needed.
The ability to build strong relationships with peers both internal and external to your functional group, and with peers/professional organizations outside your company.
A related technical degree required
For roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.