Senior Insider Threat Analyst

Salesforce•McLean, VA

About The Position

We are seeking a Senior Insider Threat Analyst to join our Insider Threat Program. We're looking for a candidate with proven expertise in detections, hunts, and investigations. Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Requirements

6 years experience in cybersecurity, incident response, intelligence, insider threat or counterintelligence, with at least X-3 years involving insider threat and/or counterintelligence investigations
Deep knowledge of procedures and indicators of malicious insider threat activity such as fraud, theft, sabotage, espionage, etc.
Proficiency in identifying both cyber, insider, and intelligence threats using a multitude of sources.
Demonstrated experience creating and employing effective strategies at scale
Excellent written and verbal presentation skills with the ability to communicate professionally with team members, stakeholders, and senior leadership, as needed.
The ability to build strong relationships with peers both internal and external to your functional group, and with peers/professional organizations outside your company.
A related technical degree required

Responsibilities

Conduct investigations into the most complex and sensitive insider-threat matters across all of Salesforce. You will own the investigation from initial signal through evidence preservation, timeline reconstruction, interview support, documentation, and handoff to partner teams.
Ensure investigative findings are documented in the case management system and investigative reports, as needed
Identify, collect, and analyze technical and non-technical indicators from a variety of sources
Conduct proactive threat hunting operations for insiders and translate the results of those hunts into investigations and high fidelity detections.
Leverage your analytical and technical skills to identify patterns and trends, and make recommendations to enhance detective and preventive controls
Contribute to risk assessments for crown jewel analysis, high-sensitivity roles, M&A activity
Build and maintain relationships with partners across Salesforce
Respond to requests for ad-hoc support, reporting, and research topics from management and stakeholders as required