Senior Software Security Engineer, Triage & Incident Management – Slack

Job Category

Products and Technology

Job Details

Slack enables people around the world to communicate and collaborate together, from the world’s largest public companies to the smallest of startups. We take performance and reliability very seriously. A taste of our scale:

  • During the week, our users spend over a billion minutes a day active in our product.

  • At peak usage, a million messages a minute passed through Slack.

  • Every day we see over 15 million simultaneously connected users

  • For millions of people, Slack is their primary communication tool for work and more, and they expect it to be exceptionally reliable and fast year-round.

About Us

Our Security team supports the unwritten fourth tenet of Slack’s mission: make people’s working lives more secure. We’re serious about protecting our infrastructure, operations, and most importantly, our customers’ data. We take a systemic approach to security, and strive to ensure we provide low friction high-impact security across everything we do.

As a member of the Slack Security Triage and Incident Management team, you are the first line of defense for all the people and parts that together make up Slack. You get out of bed each morning eager to be the front line in security, keeping our customers, employees, and tools safe. You’re excited to analyze new data, growing your skills in security to find adversaries and solve hard problems. Your work directly impacts the way millions of people, teams and businesses get things done.

Slack has a positive, diverse, and supportive culture—we look for people who are curious, inventive, and work to be a little better every single day. In our work together we aim to be smart, humble, hardworking and, above all, collaborative. If this sounds like a good fit for you, why not say hello?

What You Will Be Doing

  • Triage and track potential threats and alerts from multiple sources, and spot trends

  • Conduct and document the incident life cycle, managing and coordinating security incidents, engaging other teams, and providing other support

  • Create or propose automated tooling or streamlined processes to quickly solve incidents and issues as they arise

  • Engage with other pillars of security, engineering, and customer experience to deliver support and solutions

  • Build filters, reports, dashboards, and alerts to surface potentially unwanted activity

  • Create and update existing playbooks and runbooks, working with multi-functional team members to maintain high-quality work products

  • Participate in enterprise-wide operations to hunt for adaptable and previously unknown threats

  • Develop creative innovative approaches to accelerate threat detection, responses, and remediation of security incidents in a global organization

  • Participate in each pillar of security through mentorship, training, and project opportunities

What You Should Have

  • 4+ years of experience* in a security or customer support role

  • An investigative attitude and an interest in fostering your career in security engineering or analysis

  • Flexibility in adapting previous experience to fit the needs and culture of our outstanding team

  • Experience analyzing events or incidents to triage the issue or find the root cause

  • Ability to translate inbound triage requests into useful, team-specific work items and repeatable runbooks

  • Can create simple Python, Go, Powershell or BASH scripts to automate cybersecurity functions and provide reports, where required. This includes appropriate API use into regular production services

  • User or customer support experience, working with users to understand the issues presented

  • Self-motivated with the ability to work independently

  • Willingness to learn new technologies, tools and skills

  • Broad exposure to security fields and understanding of models and principles behind core security concepts

*What’s more important to us than a number is the skills you’ve developed, regardless of the length of time it took to get where you are. Do you have 15+ years of experience? Great! Please apply. Have only two years but feel you meet the requirements above? We look forward to hearing from you.

For Colorado-based roles: Minimum annual salary of $152,200. You may also be offered a bonus, restricted stock units, and benefits. More details about our company benefits can be found at the following link:


If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits. and are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. and do not accept unsolicited headhunter and agency resumes. and will not pay any third-party agency or company that does not have a signed agreement with or

Salesforce welcomes all.

As a federal contractor, Salesforce is required to verify that all US-based employees are fully vaccinated against COVID-19. If you receive an offer and are unable to get vaccinated for religious or medical reasons, you may request a reasonable accommodation.

Job ID : JR136805

More Information

Apply for this job

Leave your thoughts

Share this job