Salesforce
Vulnerability Operations and Response Principal (Information Security)
$197K–$314K
Virginia - Mclean +1 · Office Tech-Flexible · Principal · Full-time · Posted Oct 15, 2026
- Location
- Virginia - Mclean
Washington - Bellevue - Experience
- 8+ years.
- Education
- Bachelor's degree in a technical field such as computer science, cybersecurity, information systems, or engineering, or equivalent technical education.
About the job
Leads enterprise vulnerability management strategy and response across cloud infrastructure, software, and AI/ML systems, coordinating risk reduction and reporting to executives.
What you'll do
- Own the vulnerability operations roadmap and lead response to critical vulnerability incidents.
- Develop vulnerability governance and assessment frameworks for AI/ML workloads, and automate scanning, triage, ticketing, and remediation workflows.
- Partner with engineering, product, and architecture teams to reduce exposure; report security posture and remediation performance to executives.
What they ask for
- 8+ years of technical experience in enterprise vulnerability management, product security, infrastructure security, or security architecture at cloud scale.
- Expertise in vulnerability prioritization frameworks including CVSS, EPSS, and KEV, and modern vulnerability management across multi-tenant environments.
- Strong understanding of AI/ML architectures and security threats, including LLM risks, model supply chains, and AI pipeline exposures.
- Bachelor's degree in a technical field or equivalent technical education.
Nice to have
- Experience with CI/CD security gating, automated ticket routing, and orchestration workflows.
- Experience with Kubernetes, Docker, Terraform, CloudFormation, or relevant security certifications.
Pay
$197,300 - $313,700 annually (USD base salary)
Tools
CVSS, EPSS, KEV, CI/CD, Kubernetes, Docker, Terraform, CloudFormation
AI focus
Build security governance and vulnerability assessments for AI/ML workloads, addressing model supply chain risks, prompt injection, shadow AI, data pipeline exposures, and other AI-specific threats.
Model-written summary · the original posting is authoritative