Senior Vulnerability Response Lead - AI-Driven Security

salesforce.com, inc.; Virginia (MN); On-site; USD 173,000 - 260,000; Full time

Job summary

Salesforce is seeking a Lead Vulnerability Commander on the Vulnerability Management team to own end-to-end responses to critical vulnerabilities and drive remediation across Commercial and GovCloud environments. You will coordinate with engineering and Security leadership, track SLAs, and run retros to improve processes and tooling.

This role requires 8+ years in vulnerability management or related fields, plus a proven ability to drive fixes with engineering teams and communicate risk clearly

Qualifications

• 8+ years in vulnerability management, incident response, security operations, or a closely related field.
• A track record of coordinating cross-team remediation under tight deadlines.
• Strong grasp of vulnerability severity, exploitability, and how critical findings are triaged and fixed.
• Experience working directly with engineering teams to drive fixes to completion.
• Ability to hold senior engineers and stakeholders to a shared deadline without formal authority over them.
• Comfort escalating to leadership with a clear, factual read of risk and status.
• Excellent written and verbal communication skills.
• Familiarity with SLA tracking, metrics, and retro-driven process improvement.
• Experience using or building AI-driven tooling for security triage, investigation, or decision support.

Responsibilities

• Owning the critical vulnerability response end to end: engaging the owning engineering team, coordinating the fix, and driving the fix to closure.
• Briefing engineering owners on the required fix and the 24-hour expectation alongside Security stakeholders.
• Tracking each case against its SLA and escalating to leadership the moment a deadline is at risk, translating technical status into a clear read of risk, impact, and the decisions needed.
• Running a retrospective after each response to identify systemic causes and drive concrete prevention, not just closing the individual case.
• Taking those findings back to stakeholders to improve process and tooling.
• Partnering with the Threat Intelligence and Product Security teams to make the final call on if a vulnerability meets the criteria.
• Reporting volume, response times, and SLA adherence to Security and Engineering leadership.
• Running tabletop exercises and readiness drills so teams can meet the clock before a real critical finding lands.
• Building playbooks, tracking, and agentic automation that enables this process to not become the bottleneck.

Skills

Vulnerability management

Incident response

Security operations

Cross-team coordination

Engineering collaboration

Communication

SLA tracking

AI-driven tooling

Job description

Salesforce is seeking a Lead Vulnerability Commander on the Vulnerability Management team to own end-to-end responses to critical vulnerabilities and drive remediation across Commercial and GovCloud environments. You will coordinate with engineering and Security leadership, track SLAs, and run retros to improve processes and tooling.

This role requires 8+ years in vulnerability management or related fields, plus a proven ability to drive fixes with engineering teams and communicate risk clearly