Lead Vulnerability Response Architect

salesforce.com, inc.; Washington (District of Columbia); On-site; USD 173,000 - 260,000; Full time

Job summary

Salesforce is seeking a Lead Vulnerability Commander to own end-to-end incident response for critical vulnerabilities within our Vulnerability Management team. You will coordinate with engineering, security leadership, and product security to drive fixes, track SLAs, and lead retros that improve processes.

You will work with AI-driven tooling to accelerate triage and ensure rapid, compliant remediation across Commercial and GovCloud environments in a US-focused role requiring citizenship and

Qualifications

• 8+ years in vulnerability management or related field.
• Experience coordinating cross-team remediation under tight deadlines.
• Strong grasp of vulnerability severity, exploitability, and triage/fix processes.
• Experience working with engineering teams to drive fixes to completion.

Responsibilities

• Owning the critical vulnerability response end to end: engage the owning engineering team, coordinate the fix, and drive to closure.
• Briefing engineering owners on the required fix and the 24-hour expectation with Security stakeholders.
• Track each case against its SLA and escalate as deadlines approach, translating status into risk and decisions.
• Run retrospectives after responses to identify systemic causes and drive process improvements.
• Take findings back to stakeholders to improve processes and tooling.
• Partner with Threat Intelligence and Product Security teams to finalize vulnerability criteria.
• Report volume, response times, and SLA adherence to Security and Engineering leadership.
• Run tabletop exercises and readiness drills to meet clock constraints during incidents.
• Build playbooks and automation to prevent bottlenecks.

Skills

Vulnerability management

Incident response

Security operations

Cross-team coordination

Engineering collaboration

SLA tracking

AI tooling

Tools

AI tooling

Job description

Salesforce is seeking a Lead Vulnerability Commander to own end-to-end incident response for critical vulnerabilities within our Vulnerability Management team. You will coordinate with engineering, security leadership, and product security to drive fixes, track SLAs, and lead retros that improve processes.

You will work with AI-driven tooling to accelerate triage and ensure rapid, compliant remediation across Commercial and GovCloud environments in a US-focused role requiring citizenship and