Lead Vulnerability Response Architect

Salesforce; Washington (District of Columbia); On-site; USD 173,000 - 260,000; Full time

Job summary

Salesforce is seeking a Lead Vulnerability Commander to own end-to-end vulnerability response for critical incidents, coordinating with engineering and security leadership to fix, track SLAs, and drive preventions. You will guide remediation across teams, translate risk into actions, and push continuous improvements with risk-informed decisions.

The role requires strong communication, a track record of cross-functional delivery, and experience with AI-driven tooling in security operations. U.S.

Qualifications

• 8+ years in vulnerability management, incident response, or a closely related field.
• Experience coordinating cross-team remediation under tight deadlines.
• Strong grasp of vulnerability severity, exploitability, and triage/fix processes.
• Experience working directly with engineering teams to drive fixes to completion.
• Ability to hold senior engineers and stakeholders to a shared deadline without formal authority.
• Excellent written and verbal communication skills.
• Familiarity with SLA tracking, metrics, and retro-driven process improvement.
• Experience using or building AI-driven tooling for security triage, investigation, or decision support.

Responsibilities

• Own the critical vulnerability response end to end: engaging the owning engineering team, coordinating the fix, and driving the fix to closure.
• Brief engineering owners on the required fix and the 24-hour expectation alongside Security stakeholders.
• Track each case against its SLA and escalate to leadership the moment a deadline is at risk, translating technical status into a clear read of risk, impact, and the decisions needed.
• Run a retrospective after each response to identify systemic causes and drive concrete prevention, not just closing the individual case.
• Take those findings back to stakeholders to improve process and tooling.
• Partnering with the Threat Intelligence and Product Security teams to make the final call on if a vulnerability meets the criteria.
• Reporting volume, response times, and SLA adherence to Security and Engineering leadership.
• Running tabletop exercises and readiness drills so teams can meet the clock before a real critical finding lands.
• Building playbooks, tracking, and agentic automation that enables this process to not become the bottleneck.

Skills

Vulnerability management

Incident response

Cross-team coordination

Communication

SLA tracking

AI-driven tooling

Security operations

Tools

AI-driven tooling

Security triage tooling

Threat Intelligence

Job description

Salesforce is seeking a Lead Vulnerability Commander to own end-to-end vulnerability response for critical incidents, coordinating with engineering and security leadership to fix, track SLAs, and drive preventions. You will guide remediation across teams, translate risk into actions, and push continuous improvements with risk-informed decisions.

The role requires strong communication, a track record of cross-functional delivery, and experience with AI-driven tooling in security operations. U.S.