Security Associate

**About Futureforce University Recruiting**

Our Futureforce University Recruiting program is dedicated to attracting, retaining and cultivating talent. Our interns and new graduates work on real projects that affect how our business runs, giving them the opportunity to make a tangible impact on the future of our company. With offices all over the world, our recruits have the chance to collaborate and connect with fellow employees on a global scale. We offer job shadowing, mentorship programs, talent development courses, and much more.

**Job Category**

Software Engineering

**Job Details**

**About Salesforce**

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good - you’ve come to the right place.

**Job Description**:
Salesforce - the leader in enterprise cloud computing and one of the top 10 places to work according to Fortune magazine - is seeking security engineers to work within Detection & Response (DnR). DnR is an intel-driven security organization that identifies, detects, and responds to security incidents, vulnerabilities, and gaps in security controls to reduce risk and impact to Salesforce, our customers, and our community. We strive to lead the world in intel-driven, autonomic security operations at scale, to provide clear insights that empower Salesforce to make secure, data-based decisions effortlessly. DnR focuses on detecting and responding at scale while reducing cost and risk to the company through our automation, AI, and cost-to-serve initiatives.

Role 1: CSIRT1

Required Skills:

- Strong interest in information security, including awareness of current threats and security best practices
- Understanding of Windows, Linux, Mac operating systems, and command line tools.
- Expertise in few core IR skills (Incident response, Network Security, Storage and access security, Sandboxing, Compute security etc)
- In depth understanding of network fundamentals and common Internet protocols, such as DNS, HTTP, HTTPS / TLS, and SMTP
- Knowledge of analyzing network traffic logs, to investigate either security issues or complex operational issues
- Foundational understanding of cloud security principles and experience with leading platforms (GCP, AWS, Azure) and Kubernetes for security.
- A continuous improvement mindset that actively seeks opportunities to enhance security practices, tools, and methodologies, while incorporating automation and innovative solutions.
- Self-motivated, excellent communication, and collaboration skills to effectively work in a team and engage with stakeholders.
- As a 24/7 team, willingness to work in shifts that include nights and weekends is required.

Desired Skills & Experience

The following items are not hard requirements but would be an advantage:

- Bachelor's/Master's degree in Computer Science, Cybersecurity, or a related field.
- Knowledge of XSOAR, EDR, and SIEM tools would be a plus.
- Scripting language (i.e. Bash, Python, Powershell, etc.) or any automation experience/prompt engineering.
- Familiarity with OWASP's Top 10 vulnerabilities and experience in mitigating them.
- Prior experience in a fast-paced operational environment.
- Relevant certifications (CompTIA Security+, BlueTeam, SANs GCFA, GCIH, etc.) are beneficial.

Role 2: Threat Detection

**Required Skills**:

- 0-2 years of experience in Security event analysis Security incident response, handling incidents and breaches or related experience is preferred
- Good knowledge of writing detections based on Network, Host, OS and other relevant logs
- Experience writing correlation and log analytic queries involving multiple log sources
- Data handling and data analysis skills for security analysis
- Experience coding with Python or other common coding languages to automation tasks
- Ability to correlate between multiple sources of logs to write an effectively detect adversaries
- Good knowledge of security fundamentals, of least privilege, Vulnerabilities, attack scenarios, MITRE framework, kill chain that help detect and respond to an attack.
- Effective communication & collaboration skills with multiple teams within Security Organisation, Data Science and other partner teams.

Qualifications:

- Master’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
- Proven experience in threat detection, security monitoring, or incident response.
- Proficiency with SIEM tools (e.g., Splunk, ArcSight, QRadar) and other security technologies (e.g., IDS/IPS, EDR, firewalls).
- Strong understanding of network protocols, operating syste