Senior/Lead Defensive Operations Engineer, Salesforce

• Extensive experience working in Information Security (i.e. platform abuse, threat intelligence, incident response, and/or threat detection roles); or User level knowledge of Salesforce platforms
• Expertise in information security theory and practice, with specialization in at least one of the following: Log Analysis, File level Forensics, Data Mining, Malware Analysis
• 1 year experience in any customer-facing role (Support, Sales Engineering, etc.)
• Extensive experience with SQL & YARA
• Familiarity with at least one of the following coding languages: Python, Shell, Go
• Comfortable using a command-line interface
• Proficiency in Technical Writing
• Demonstrated ability to collaborate exclusively using team messaging and video platforms

Desirable

• At our core, Platform Defense and Safety works to detect and respond to malicious user activity (misuse, abuse, crime, etc) when everything is working “as designed”. At any moment in time, multiple actors are attempting to bypass detection and response systems, masquerading as customers in order to take unfair advantage of our systems and services
• Serve as a public face of Platform Defense and Safety at Salesforce! Review, triage, and respond to external reports of abuse and malicious content
• Partner with our Office of Ethical Usage and Legal teams to ensure our platforms are free of malicious content
• Create detection and response rules as part of an abuse analysis lifecycle
• Maintain a deep understanding of the types of threats (and threat actors) operating in the realm of abuse across the Internet – especially those that intentionally blend in and manage to take advantage of systems working “as designed”
• Identify, articulate and document anti-abuse detection and response tooling requirements and capabilities for engineering teams to develop
• Keep abreast of emerging trends in digital crime and merchant fraud
• Contribute to team playbooks and documentation
• Work collaboratively across diverse teams to meet organizational goals
• Capable of thoughtful and deliberate action in a stressful crisis situation