Job Details

The Salesforce Information Security team is best in class. Data security is paramount and a top priority for the company. Trust and security are Salesforce’s number one values.  As a result, we have built a large-scale security monitoring infrastructure that collects, stores, and analyzes terabytes of data every day.  

Salesforce is seeking a Senior Manager of Threat Detection. This operational team is responsible for writing alerting rules using logs and other data to detect potential attacks against Salesforce. We work closely with the CSIRT team that responds to our alerts and the engineering team that builds the platforms we rely on.

The Senior Manager will build and maintain a healthy, inclusive team of technical engineers, set and communicate the team’s vision, and maintain strong relationships with the team’s partners. The team is seeking to build its engineering skills, so the manager should be prepared to coach beginning developers and help them grow engineering skills. The team strives to maintain operational excellence in rapid and effective detection development while increasingly automating away routine work, increasing the fidelity of detections, and improving the breadth of what we detect.

The manager will also be responsible for leading strategic initiatives across and outside the broader Detection & Response organization. For example, the manager may develop and execute our strategy for automated investigation and response (SOAR). The manager is expected to operate independently, resolving ambiguous technical and interpersonal issues with little guidance and proactively identifying and solving new problems. 

This role may be based in Bellevue, Washington or San Francisco, California, reporting to a manager in Bellevue with current team members in San Francisco, as part of a team with locations across the globe.

Required Skills:

• 5+ years experience in Information Security, including experience in security operations

• 1+ years experience in people management

• Demonstrated ability to build a positive team culture and a highly effective team

• Strong technical understanding of security fundamentals, network and operating system fundamentals and common Internet protocols

• The interpersonal and communication skills necessary to build strong relationships with both direct reports and peers across the company and industry

• Ability to write code and SQL well enough to teach others. All common languages are acceptable; Python is preferred.

Preferred Skills:

• Undergraduate degree in computer science, information technology, or similar subjects

• Demonstrated ability to think strategically, such as by proposing and leading projects with division-, company-, or industry-wide impact

• Demonstrated ability to work across teams and/or geographic locations

• Experience working on and/or leading a detection, SOC and/or incident response team (blue team)

• Deep understanding of the information security threat landscape, such as common attack vectors and tools, best practices for securing systems and networks, etc.

• Software engineering experience, especially with demonstrated professional results

• Experience writing intrusion detection system rules

• Experience with Splunk and Splunk Processing Language

• Experience with intrusion detection systems, such as Suricata or Sourcefire

• Experience with public cloud, such as AWS, Azure and GCP, especially cloud security

We have a public-facing website https://www.getsalesforcebenefits.com/en that explains our various benefits, including wellbeing reimbursement, generous parental leave, adoption assistance, fertility benefits, and more. Visit for the full breakdown!

Accommodations - If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits.

Salesforce.com and Salesforce.org are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce.com and Salesforce.org do not accept unsolicited headhunter and agency resumes. Salesforce.com and Salesforce.org will not pay any third-party agency or company that does not have a signed agreement with Salesfore.com or Salesforce.org.

Salesforce welcomes all.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.