Senior Threat Detection Engineer
Core
Designing and implementing threat detection logic, attack simulation scenarios, and detection rules to protect Salesforce's infrastructure, products, employees, and customers from cyber attacks.
Role type
Senior Threat Detection Engineer
Builds
Detection logic, attack simulation scenarios, and alerting rules for security platforms
Domain
Cybersecurity, Threat Detection, Cloud Security
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Threat detection methodology development, log correlation, complex query construction (SPL, YARAL), MITRE ATT&CK framework knowledge, SIEM/EDR/NDR/SOAR platform usage, large dataset analysis, Python automation, cross-functional collaboration
Preferred skills
Splunk/Elastic/FLINK/Chronicle experience, public cloud security (AWS/Azure/GCP), data science algorithms, SOAR automation platforms
Technologies
Splunk, Elastic (ELK), FLINK, Chronicle, AWS, Azure, GCP, Python, SPL, YARAL, MITRE ATT&CK
Responsibilities
Write logic on security platforms to detect malicious activity, build attack simulation scenarios, test logic effectiveness, collaborate with incident response teams to improve alert reliability, lead end-to-end projects owning technical areas
Seniority
Senior, hands-on IC
