Security Analyst

About the Company

Long Finch Technologies is seeking an experienced Security Analyst / Engineer to support the security posture of the Salesforce Service Cloud (SFSC) platform. The role focuses on vulnerability management, security incident response, application security, security remediation, and coordination across internal security teams, engineering teams, and external security vendors.

About the Role

As a Security Analyst / Engineer, you will identify, assess, prioritize, and remediate security vulnerabilities while supporting incident response and application security activities. You will work closely with security and engineering teams to evaluate security risks, coordinate remediation, support penetration testing, and strengthen the overall security posture of Salesforce Service Cloud.

Key Responsibilities

• Triage and prioritize security vulnerabilities identified through internal security scans.
• Assess vulnerabilities based on severity, exploitability, and business impact.
• Drive vulnerability remediation activities with application and engineering teams.
• Plan and coordinate security patches and hotfixes.
• Lead and support security incident response, including investigation, remediation, documentation, and post‑incident reviews.
• Coordinate penetration testing activities with internal security teams and external security vendors.
• Support security assessments and provide application security guidance for Salesforce Service Cloud changes.
• Collaborate with security and engineering teams on exploit assessment and remediation planning.
• Maintain security documentation and provide visibility into vulnerabilities, security incidents, and remediation status.
• Proactively identify security risks and recommend improvements to strengthen the organization’s security posture.

Required Qualifications

• 5+ years of experience in Cybersecurity, Application Security, Security Engineering, or Vulnerability Management.
• Strong experience with vulnerability management and security incident response.
• Hands‑on experience with security scanning, vulnerability triage, risk assessment, and remediation.
• Experience coordinating penetration testing and security assessments.
• Strong understanding of application security principles and security risk management.
• Experience collaborating with internal security teams, application and engineering teams, and external security vendors.
• Strong analytical, communication, documentation, and problem‑solving skills.

Preferred Qualifications

• Experience with Salesforce Service Cloud (SFSC) or Salesforce security.
• Knowledge of OWASP and common application security vulnerabilities.
• Experience with enterprise security scanning, vulnerability management, or SIEM tools.
• Application security experience across SAST, DAST, SCA, API security, code review, and threat modeling.
• Relevant security certifications such as Security+, CySA+, CEH, GSEC, or CISSP are a plus.

Location

Seattle, WA, United States — Onsite.