Senior Threat Detection Engineer

Senior Threat Detection Engineer

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword — it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? Agentforce is the future of AI, and you are the future of Salesforce.

About the Role

As a Senior Threat Detection Engineer, you will take full ownership of a technical area, responsible for delivering all necessary research and features to achieve our team's goals. You will collaborate with teams across multiple geographies to deliver on initiatives with many moving parts. Additionally, you will have the opportunity to lead broad initiatives that extend beyond our immediate work. We value innovation and expect everyone to come up with creative solutions to the challenges we and our customers face.

What You Will Be Doing:

• Detecting attacks against Salesforce's infrastructure, products, employees, and customers.
• Collaborating with CSIRT and engineering teams to enhance detection effectiveness.
• Writing logic on security platforms to detect malicious activity, building attack simulation scenarios, and testing logic effectiveness.
• Working closely with the incident response team to improve alert reliability and quality.
• Leading projects end-to-end, owning a technical area, and delivering research and features.
• Engaging in security organization-wide initiatives and cross-team collaboration with multiple engineering teams.

What You Should Have:

• 8+ years of experience in Cyber Security, including at least 6 years of hands-on experience in Threat Detection, Threat Hunting, Security Incident Response, and managing significant security incidents and breaches.
• Expertise in developing and refining threat detection methodologies, leveraging security logs from various sources, including network infrastructure, endpoint devices, public and private cloud substrates, and SaaS.
• Strong proficiency in log correlation techniques to identify patterns and anomalies indicative of malicious activity. Expertise in constructing complex search queries using languages such as SPL, YARA, and other query languages to analyze large volumes of data.
• In-depth knowledge of fundamental security principles, common attack vectors, Tactics, Techniques, and Procedures (TTPs) used throughout the cyber kill chain, and relevant security frameworks such as the MITRE ATT&CK framework. Practical experience with a variety of security tools and technologies, including SIEM systems, EDR solutions, NDR tools, and SOAR platforms. Ability to handle and analyze large and complex datasets, identifying meaningful security insights and trends. Understanding data processing pipelines, performance considerations when querying large datasets, and synthesizing findings into actionable intelligence.

Nice to Have:

• Hands-on experience with log aggregation/SIEM tools such as Splunk, Elastic (ELK), FLINK, Chronicle, etc.
• Experience with public cloud security, particularly AWS, Azure, or GCP.
• Undergraduate degree in Cyber Security, Computer Science, Information Technology, or similar fields.
• Experience working in a globally distributed team, leveraging documentation and asynchronous communications.
• Experience with automation platforms such as SOAR.

When you join Salesforce, you'll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best. Together, we'll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what's possible — for yourself, for AI, and the world.

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that's inclusive, and free from discrimination. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law.

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com. The typical base salary range for this position is $162,800 - $223,900 annually. The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.