Drimva

Salesforce

Vulnerability Operations and Response Principal (Information Security)

$197K–$314K

Virginia - Mclean +1 · Office Tech-Flexible · Principal · Full-time · Posted Oct 15, 2026

Location
Virginia - Mclean
Washington - Bellevue
Experience
8+ years.
Education
Bachelor's degree in a technical field such as computer science, cybersecurity, information systems, or engineering, or equivalent technical education.

About the job

Leads enterprise vulnerability management strategy and response across cloud infrastructure, software, and AI/ML systems, coordinating risk reduction and reporting to executives.

What you'll do

  • Own the vulnerability operations roadmap and lead response to critical vulnerability incidents.
  • Develop vulnerability governance and assessment frameworks for AI/ML workloads, and automate scanning, triage, ticketing, and remediation workflows.
  • Partner with engineering, product, and architecture teams to reduce exposure; report security posture and remediation performance to executives.

What they ask for

  • 8+ years of technical experience in enterprise vulnerability management, product security, infrastructure security, or security architecture at cloud scale.
  • Expertise in vulnerability prioritization frameworks including CVSS, EPSS, and KEV, and modern vulnerability management across multi-tenant environments.
  • Strong understanding of AI/ML architectures and security threats, including LLM risks, model supply chains, and AI pipeline exposures.
  • Bachelor's degree in a technical field or equivalent technical education.

Nice to have

  • Experience with CI/CD security gating, automated ticket routing, and orchestration workflows.
  • Experience with Kubernetes, Docker, Terraform, CloudFormation, or relevant security certifications.

Pay

$197,300 - $313,700 annually (USD base salary)

Tools

CVSS, EPSS, KEV, CI/CD, Kubernetes, Docker, Terraform, CloudFormation

AI focus

Build security governance and vulnerability assessments for AI/ML workloads, addressing model supply chain risks, prompt injection, shadow AI, data pipeline exposures, and other AI-specific threats.

Model-written summary · the original posting is authoritative

First seen Oct 16, 2026 · Last verified Nov 5, 2026 (UTC)