Job Title: Security Analyst

Location: Remote - US (must work East Coast hours)

THE OPPORTUNITY:

Although we’re proud of our history, we’re just as excited about the future. We want to create a world-class culture and company that attracts, develops, engages and retains elite talent.

At SalesLoft, our information security team is pivotal to our company’s success. You will be a key member of our security operations team, responsible for the protection of SalesLoft’s most important technology and data resources.

On a day-to-day basis, you will be responsible for identifying, analyzing, and remediating vulnerabilities and risks across a wide range of systems. Specifically, you will:

Administer and maintain vulnerability scanning systems
Triage vulnerability alerts and ensure issues are appropriately rated and escalated to technology owners
Where possible, demonstrate the applicability of vulnerabilities to the SalesLoft technology environment through reproduction of attacks or detailed descriptions of possible vectors
Collaborate cross-functionally with technology owners to ensure clear communication of vulnerability remediation requirements
Provide executive level reporting on vulnerability volume, remediation SLA compliance, and interpret data to surface emerging trends
Stay abreast of industry trends and exploits that may not be detected by scanning systems
Assist the governance, risk and compliance team in evidencing SalesLoft’s controls to customers, auditors, and other relevant stakeholders.

In addition to working with amazing colleagues who exemplify our ‘team over self’ core value, you will also have the opportunity to design and build new ways to help keep our systems and data safe. You will have an opportunity to make a difference.

WHAT WE’RE LOOKING FOR:

We are seeking a bias-towards-action, results-oriented security analyst to serve as a technical expert on our security operations team. Specifically, you will play a pivotal role in helping us implement and maintain industry-leading security controls that will scale with the business.

If you’re looking for an opportunity to learn more, do more, and become more than previously possible… if you’re passionate about innovation, growth and serving customers and thrive in a fast-paced, developmental environment, then becoming a security analyst is the career path for you!

THE TEAM:

SalesLoft’s security team comprises seasoned and up-and-coming infosec professionals who are all aligned on one vision and mission:

Vision: Every seller is loved by the buyers they serve (#saleslove)
Mission: Equip companies to maximize revenue by creating a fantastic buying experience

The security operations team consists of practitioners who strive to find and fix potential weaknesses in SalesLoft’s control environment while also looking for threat indicators and mitigating risks across the organization. They are also the epitome of our core values - Customers First. Team Over Self. Focus on Results. Bias Towards Action. Glass Half Full.

THE SKILL SET:

2 years of experience in a security operations or vulnerability management role
Professional working knowledge of the following technologies: Linux, Kubernetes, Docker, AWS, GCP, Postgres
Experience with triaging, analyzing and escalating vulnerabilities at the following system layers - source code (dependency scans, SAST, bug bounty, pen tests), container images and operating systems, databases, cloud configurations, etc.
Monitor, analyze, interpret and understand alerts coming from many different sources. Use sound judgment to understand the implications of these alerts within the context of Salesloft environment to rate risk, severity, impact and likelihood of the alert based on details of the alert, knowledge of likely threat landscape, attack chains to
Respond to new unknown threats not seen before with appropriate judgment and understanding of criticality and risk to Salesloft.
Manage an active incident response by gathering and analyzing all relevant information about a possible threat, paired with knowledge of the environment and capabilities of the tool reporting the alert to communicate risk, threat, and remediation to decision makers.
Take preventative action on alerts or escalate to appropriate TechOps and Engineering staff.
Take raw information from vulnerability scans, applying contextual information about our environment and modifying the severity to an appropriate level for remediation and prioritization.
Follow up on remediation actions owned by other teams to ensure SLA’s are being met.
Work with other teams to help understand the recommended remediation, discuss possible mitigations and other controls, or extenuating circumstances that might impact the severity of the tool.
Apply contextual knowledge and security expertise to help recommend new security controls and measures be added to the environment to reduce risk to Salesloft.
Using experience, security expertise, judgment and to predict likely future threats and impacts to Salesloft and appropriate mitigation strategies to reduce the threat.
Independent development activity to continually learn and enhance knowledge of the information security landscape to keep abreast of ever evolving threats and mitigations.
Ability to analyze vulnerability data holistically and provide relevant reporting to technology owners and leadership personnel
Familiarity with SaaS technology environments
Ability to thrive in a dynamic, fast-paced startup environment
Familiarity with information security compliance standards relevant to SalesLoft (including GDPR, SOC 2, ISO 27001)
Ability to multi-task with strong attention to detail
Track record of working with security configurations for sensitive data and systems
Industry certifications (e.g., CISSP, CISA, AWS Security Specialty, etc.) a plus

WITHIN ONE MONTH, YOU’LL:

Learn the day-to-day operational cadence and become familiar with the infosec technology stack
Understand the key performance indicators (KPIs) of the SalesLoft security team
Meet with key personnel on technology owner teams (TechOps, Engineering, IT, etc.)
Learn and understand the mission, vision, and values of the SalesLoft security team
Gain access to vulnerability scanning systems and begin triaging alerts
Set your OKRs (Objectives and Key Results) with your manager and develop an action plan to achieve them

WITHIN THREE MONTHS, YOU’LL:

Act as a consultant, evaluating the effectiveness of the security program with a fresh set of eyes
Build custom reports and dashboards to help drive effective and timely remediation of security issues
Build out a project road map outlining process improvements and gap remediations over the next six months
Identify net new measures of success of the security program

WITHIN SIX MONTHS, YOU’LL:

Own and operate systems for identifying vulnerabilities in production and corporate infrastructure
Participate in quarterly business reviews and update meetings with technology owners to discuss vulnerability management trends and recommend improvements to existing processes
Help create meaningful reporting by driving down false positives and increasing actionable alert volume

WITHIN TWELVE MONTHS, YOU’LL:

Serve as the lead technical expert on SalesLoft’s vulnerability management controls
Work with customers, auditors, and internal personnel to address security questions and concerns
Be accountable for the resolution of internally and externally identified vulnerabilities
Begin automating manual processes to improve efficiency and overall security posture

IS THIS ROLE NOT AN EXACT FIT? Keep an eye on our Careers Page for other positions!

WHY SHOULD YOU WORK AT SALESLOFT:

You will become part of an amazing culture with a supportive CEO and smart teammates who actually care
You will work with an amazing team you can learn from and teach
You will experience joining a high-growth/high-traction organization
You will hear “Yes, let’s do that!” and then have the opportunity to successfully execute on your ideas
We have a vibrant, open office that utilizes modern technology
You will grow more here than you would anywhere else, that is a promise

SalesLoft is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, pregnancy, sexual orientation, or any other characteristic protected by law.

Salesloft

New Jobs

Security Analyst