Vulnerability Operations and Response Principal, Information Security

Salesforce

. Own the internal Vulnerability Operations roadmap end to end across traditional infrastructure, container and microservice ecosystems, and secure development .

Posted 10/15/2026full-timeUnited StatesLead💰 $197,300 - $313,700 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityDockerKubernetesTerraform

About the role

Key responsibilities & impact

Own the internal Vulnerability Operations roadmap end to end across traditional infrastructure, container and microservice ecosystems, and secure development
Build and enforce security governance and vulnerability assessment frameworks for AI and ML workloads
Address model supply chain risks, prompt injection pathways, shadow AI deployments, and data pipeline exposures
Lead high-profile vulnerability incidents and improve incident-response processes
Partner with Product Management, Engineering, and Architecture leaders to minimize vulnerability exposure across the lifecycle
Design continuous automated scanning, intelligent triage, and ticketing orchestration pipelines
Eliminate manual overhead and streamline remediation without creating operational bottlenecks
Report systemic posture trends, emerging AI threat vectors, model vulnerability metrics, and SLA performance to executive security leadership and C-level stakeholders

Requirements

What you’ll need

8+ years of deep technical experience in enterprise vulnerability management, product security, infrastructure security, or security architecture at cloud scale
Track record of running vulnerability response across a broad spectrum of stakeholders
Principal-level expertise in threat-informed vulnerability prioritization frameworks, including CVSS, EPSS, and the KEV catalog
Expertise in modern vulnerability management lifecycles across diverse multi-tenant environments
Strong understanding of emerging AI and ML architectures and security threat models, including LLM security risks, frontier model-based attacks, supply chain vulnerabilities, and AI pipeline exposures
Proven success influencing senior engineering and product stakeholders without direct authority
Clear communication of complex technical risk, systemic vulnerability findings, and strategic remediation roadmaps
Bachelor's degree in a technical field such as computer science, cybersecurity, information systems, or engineering, or equivalent technical education
Experience with automated CI/CD security gating, automated ticket routing, and orchestration workflows preferred
Hands-on experience securing Kubernetes and Docker environments preferred
Experience with Terraform and CloudFormation preferred
Industry certifications such as CISSP or CISM, or specialized cloud or security architecture credentials preferred

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Incentive compensation may be available for certain roles
Equity may be available for certain roles