To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.Job CategoryProducts and TechnologyJob DetailsWe’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good– you’ve come to the right place.Job DescriptionTrust is the #1 value at Salesforce. It’s not just words or a slogan; it’s part of the beating heart of the company. Everyone contributes to Trust every day. We define Trust broadly, to include security, availability, and performance. Delivering new capabilities is one thing, but we must do so while protecting and earning our customer's trust.As an Insider Threat Analyst at Salesforce, you will play a critical role in managing insider threat investigations and helping to build out our counterintelligence capabilities. Your responsibilities will include analyzing and investigating anomalous user activities, indicators, and providing support to active incidents alongside our most valuable stakeholders. You will support cross-functional opportunities across Salesforce to help identify security trends and metrics, develop innovative use cases designed to detect anomalous events, and support education and awareness campaigns for both insider threat and counterintelligence. You will use sophisticated technology and robust partnerships to enhance our counterintelligence posture against nation-state actors and support high-risk populations from potential compromise. You will play a vital role in taking the Salesforce Insider Threat and Counterintelligence programs to the next level by being both an analytical and technical leader on our team and driving innovation.Responsibilities:Drive triage, investigation, and management of insider threat casesIdentify, collect, and analyze technical and non-technical indicators from a variety of sourcesCoordinate investigation and mitigation strategies with other global teams within Salesforce such as Legal, Ethics and Integrity, Global Safety and Security, and the Employee Relations teamsLeverage your analytical and technical skills to identify patterns and trends, and make recommendations to enhance detective and preventive controlsOperationalize and maintain the processes and playbooks required for insider threat analysis and support the development and execution of any new processes and playbooksLeverage subject matter expertise to educate stakeholders on the importance of data and information sharing to protect and enable the businessEnsure metrics are impactful so that leadership can make informed business decisions to improve the security posture of the companyEnsure investigative findings are documented in the case management system and investigative reports, as neededSupport process improvement initiatives and provide project related support for both the Insider Threat and Counterintelligence programsRespond to requests for ad-hoc support, reporting, and research topics from management and stakeholders as requiredMust be able to maintain confidentiality and use sound discretion and judgment at all timesRequired Qualifications:5+/8+ years experience in cybersecurity, incident response, intelligence, insider threat or counterintelligence, with at least 6+ years leading and managing insider threat and/or counterintelligence investigationsDeep knowledge of malicious insider threat indicators, such as those associated with theft of intellectual property, sabotage, and espionageStrong working knowledge of sophisticated nation-state threat actors and/or prior experience supporting cyber threat intelligence teamsDemonstrated ability to collaborate with the greater security, counterintelligence, and insider threat professional communitiesProficiency in identifying both cyber, insider, and intelligence threats using a multitude of sources.Strong proficiency and at least 4+ years of experience utilizing security-related tools such as SIEM, UBA, DLP, etc.Working knowledge of investigation processes and techniques, leveraging technical and non-technical indicators and ability to prescribe best practices with our stakeholdersExcellent written and verbal presentation skills with the ability to communicate professionally with team members, stakeholders, and senior leadership, as needed.Strong aptitude for identifying and learning new technologies Ability to adapt to a fast-paced and evolving environmentA related technical degree required.Preferred Qualifications:Prior experience in the military, government, law enforcement, or intelligence community with a deep understanding of their associated intelligence processes and agencies; credentialed agent experience is strongly preferredStrong network of associated professionals and experience collaborating with both public and private organizationsEmployee interview experience and/or certification is highly recommendedFormal education and training in cybersecurity, insider threat, and counterintelligence strongly preferred.AccommodationsIf you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.Posting StatementAt Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits.Salesforce, Inc. and Salesforce.org are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce, Inc. and Salesforce.org do not accept unsolicited headhunter and agency resumes. Salesforce, Inc. and Salesforce.org will not pay any third-party agency or company that does not have a signed agreement with Salesforce, Inc. or Salesforce.org.Salesforce welcomes all.
View Original Job Posting