Senior Insider Threat Analyst

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

We are seeking a Senior Insider Threat Analyst to join our Insider Threat Program. We're looking for a candidate with proven expertise in detections, hunts, and investigations.

• Conduct investigations into the most complex and sensitive insider‑threat matters across all of Salesforce. You will own the investigation from initial signal through evidence preservation, timeline reconstruction, interview support, documentation, and handoff to partner teams.
• Ensure investigative findings are documented in the case management system and investigative reports, as needed.
• Identify, collect, and analyze technical and non‑technical indicators from a variety of sources.
• Conduct proactive threat hunting operations for insiders and translate the results of those hunts into investigations and high‑fidelity detections.
• Leverage your analytical and technical skills to identify patterns and trends, and make recommendations to enhance detective and preventive controls.
• Contribute to risk assessments for crown jewel analysis, high‑sensitivity roles, M&A activity.
• Build and maintain relationships with partners across Salesforce.
• Respond to requests for ad‑hoc support, reporting, and research topics from management and stakeholders as required.

• 6 years of experience in cybersecurity, incident response, intelligence, insider threat or counterintelligence, with at least X‑3 years involving insider threat and/or counterintelligence investigations.
• Deep knowledge of procedures and indicators of malicious insider threat activity such as fraud, theft, sabotage, espionage, etc.
• Proficiency in identifying both cyber, insider, and intelligence threats using a multitude of sources.
• Demonstrated experience creating and employing effective strategies at scale.
• Excellent written and verbal presentation skills with the ability to communicate professionally with team members, stakeholders, and senior leadership, as needed.
• The ability to build strong relationships with peers both internal and external to your functional group, and with peers/professional organizations outside your company.
• A related technical degree required.

When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love.

Salesforce is an equal opportunity employer and maintains a policy of non‑discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal.

Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey.

It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination…