Incident Responder

Salesforce

. Perform CSIRT Tier 1 monitoring around the clock .

Posted 9/23/2026full-timeUnited StatesJunior💰 $96,300 - $145,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response, security monitoring, and threat identification while collaborating effectively with cross-functional teams. Proficient in operating system administration and security controls across multiple platforms, with a strong foundation in information security best practices.

Highest-signal resume keywords

Incident ResponseSecurity MonitoringIntrusion Detection/Response ToolsOperating System AdministrationCompTIA Security+

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityNetwork FundamentalsDNSHTTPHTTPS/TLSSMTPVulnerabilitiesThreatsIndicators of CompromiseSecurity Controls

Soft Skills

CollaborationRelationship BuildingCommunication

Tools & Technologies

WAFsFirewallsProxiesAntivirusFile Integrity MonitoringOS Logs

Certifications & Qualifications

CompTIA Security+BTL1SANS GCFAGCIH

Industry Keywords

CSIRT24x7 Operations CenterIncident-Response PlaybooksSecurity AlertsThreat Landscape

Tech Stack

Tools & technologies

Cyber SecurityDNSFirewallsLinuxMacOSSMTPUnix

About the role

Key responsibilities & impact

Perform CSIRT Tier 1 monitoring around the clock
Triage and prioritize security alerts and identify threats requiring escalation
Support containment, eradication, and recovery during security incidents
Follow established incident-response playbooks and senior team guidance
Collaborate with engineering, business, and security teams on response efforts
Drive organizational security improvements
Document findings and maintain accurate incident notes and summaries
Keep stakeholders informed throughout the incident-response process
Operate from a 24x7 operations center

Requirements

What you’ll need

2+ years of experience in an IT operations environment, or 1+ years of specialized security operations experience
Foundational knowledge of information security, current threats, best practices, network fundamentals, DNS, HTTP, HTTPS/TLS, and SMTP
Operating system administration and security controls for macOS, Microsoft Windows, and Linux/Unix
Understanding of incident response phases, vulnerabilities, threats, actors, and Indicators of Compromise
Ability to build strong working relationships across internal and external teams
U.S. citizenship (born or naturalized)
No dual citizenship
Ability to pass a U.S. federal government Minimum Background Investigation for a Moderate Public Trust position
Hands-on experience with intrusion detection/response tools, WAFs, firewalls, proxies, antivirus, file integrity monitoring, and OS logs
In-depth understanding of the information security threat landscape, attack vectors, tools, and best practices
Relevant certifications such as CompTIA Security+, BTL1, SANS GCFA, or GCIH, or a degree in Computer Science, Cybersecurity, or a related field
Foundational understanding of GenAI, Agentic AI, and prompt engineering
Ability to work shift schedules, including on-call shifts and weekends

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Reasonable accommodation during the application or recruiting process