Vacancies:SecurityIncidentHandlersatSalesforce
Salesforce,theleaderinenterprisecloudcomputingandoneofthetop10placestoworkaccordingto
Fortunemagazine,isseekingseveralSecurityIncidentHandlersforourComputerSecurityIncidentResponse
team(CSIRT)inDublin.TheCSIRTisresponsiblefor24x7x365securitymonitoringandrapidincidentresponse
acrossallSalesforceenvironments.Wearethe‘tipofthespear’inSalesforcesecurityandthelastlineof
defenceprotectingcompanyandcustomerdatafromouradversaries.
IncidentHandlersareresponsibleforexecutingsecurityoperationsprocessesincludingreal-timeanalysisof
securityalertdataandrespondingtopotentialincidents.IncidentHandlersneedstrongsecurityskills
(network,Linux,Windows)andagoodknowledgeofdigitalforensics.Arelevantdegreeinforensicsorsecurity
wouldbebeneficial,aswouldcertificationssuchasSANSGCIAorGCIH.
REQUIREDSKILLS:
•
•
•
•
•
1to5years’experienceintheInformationSecurityfield,includingoperationalsecuritymonitoringor
incidentresponseexperience:
o Monitoringdevicessuchasnetworkandhost-basedintrusiondetectionsystems,webapplication
firewalls,databasesecuritymonitoringsystems,firewalls/routers/switches,proxyservers,
antivirussystems,fileintegritymonitoringtools,andoperatingsystemlogs.
o Respondingtosecurityincidentsinaproductionenvironment,suchasinvestigatingand
remediatingpossibleendpointmalwareinfectionsandmitigatinge-mailbornethreatssuchas
spamandphishing.
StrongtechnicalunderstandingofnetworkfundamentalsandcommonInternetprotocols.
Strongtechnicalunderstandingoftheinformationsecuritythreatlandscape(attackvectorsandtools,
bestpracticesforsecuringsystemsandnetworks,etc.).
FamiliaritywithMicrosoftWindowsandLinux/Unixsystemadministrationandsecuritycontrols.
Musthavestrongverbalandwrittencommunicationskills;abilitytocommunicateeffectivelyandclearly
tobothtechnicalandnon-technicalstaff.
DESIREDSKILLS:
•
•
•
•
•
•
•
•
Experienceconfiguringsecurityincidentandeventmanagementtools(suchasARCSight,SymantecSIM,
LogLogic),includingcreatingeventfilteringandcorrelationrulesandreports.
Systemforensics/investigationskills,includinganalysingsystemartifacts(filesystem,memory,running
processes,networkconnections)forindicatorsofinfection/compromise.
Experiencemanagingintrusiondetectionsystems(suchasIBMISSorSourcefire),includinginitial
provisioning,softwarepatching/upgradesandsignaturecreation/tuning.
Scriptingskills(i.e.Python/Perl,shellscripting)asignificantplus.
Priorexperienceina24x7x365operationsenvironment.
FamiliaritywithITILservicemanagementmethodology.
Abilitytowritecustomintrusiondetectionsystemrules.
Relevantinformationsecuritycertifications,suchasCISSP,SANSGCIA,SANSGCIH,SANSGPEN,SANS
GFCA,OffensiveSecurityOSCP.
FURTHERDETAILS
ThesepositionsarebasedinSandyfordinDublinandareshift-based(4x10-hourdaysperweekincluding
someweekends,typicalhoursare8AMto6PM).Benefitsincludeeducationreimbursementandextensive
trainingopportunities.
ToapplyorforfurtherinformationpleasecontactOwenO’Connoratooconnor@salesforce.com.