Principal Threat Researcher, Software Engineer – Counter-Threat Ops

Posted 2hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Principal Threat Researcher in Salesforce's Threat Intelligence team, disrupting cyber threats. Focusing on adversary disruption and technical leadership while collaborating with law enforcement.

Responsibilities:

  • Lead initiatives to disrupt threat actor operations
  • Develop high-fidelity technical evidence and attribution data to support criminal prosecution
  • Deepen Salesforce’s reach into the broader cyber intelligence community
  • Perform expert-level tracking of advanced e-crime and state-sponsored actors
  • Build custom scripts, investigative tools, and automation (Python, SQL, Splunk)
  • Serve as a technical mentor on the Threat Intelligence team
  • Collaborate with Incident Response, Security Engineering, and Platform Defense

Requirements:

  • 10+ years of hands-on experience identifying, tracking, and disrupting advanced cyber threat actors
  • 5+ years hands-on experience with strategic intelligence writing and standard conventions
  • Established threat intelligence practitioner and active member of private, invite-only Information Security trust groups
  • Experience with Cyber Threat Intelligence writing for both technical, non-technical, and executive audiences
  • Experience conducting and correlating threat research using OSINT and proprietary tools
  • 3+ years experience scripting, automating, and building investigative tooling (Python, Bash, SQL, Splunk)
  • Advanced prompt engineering skills and the ability to write precise, structured prompts

Benefits:

  • time off programs
  • medical
  • dental
  • vision
  • mental health support
  • paid parental leave
  • life and disability insurance
  • 401(k)
  • employee stock purchasing program