Lead Vulnerability Commander

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category
Enterprise Technology & Infrastructure

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

The Experience

As a Lead Vulnerability Commander on the Vulnerability Management team, you own the response to the most critical vulnerabilities end to end. As commanders on the most impactful cyber security team, we lead Salesforce's security response for our Commercial and GovCloud environments while acting as the security executive liaison with Security and Business Leadership across the lifecycle of events.

Frontier AI models have drastically decreased the time to exploit vulnerabilities and these need an incident-level response. You are that person and this is a driving role, not a passive coordination seat. You engage the owning engineering team, brief them on the fix and the remediation expectation, track the SLA, escalate to leadership when the clock is at risk, and run retros that feed process and tooling improvements back to Engineering partners.

This candidate must be a U.S. citizen (U.S. born or naturalized) operating on U.S. Soil who does not hold dual citizenship with the ability to meet customer and government screening standards applicable to this role.

What You'll Actually Be Doing

• Owning the critical vulnerability response end to end: engaging the owning engineering team, coordinating the fix, and driving the fix to closure.
• Briefing engineering owners on the required fix and the 24-hour expectation alongside Security stakeholders.
• Tracking each case against its SLA and escalating to leadership the moment a deadline is at risk, translating technical status into a clear read of risk, impact, and the decisions needed.
• Running a retrospective after each response to identify systemic causes and drive concrete prevention, not just closing the individual case.
• Taking those findings back to stakeholders to improve process and tooling.
• Partnering with the Threat Intelligence and Product Security teams to make the final call on if a vulnerability meets the criteria.
• Reporting volume, response times, and SLA adherence to Security and Engineering leadership.
• Running tabletop exercises and readiness drills so teams can meet the clock before a real critical finding lands.
• Building playbooks, tracking, and agentic automation that enables this process to not become the bottleneck.

You're Our Person If You Have:

• 8+ years in vulnerability management, incident response, security operations, or a closely related field.
• A track record of coordinating cross-team remediation under tight deadlines.
• Strong grasp of vulnerability severity, exploitability, and how critical findings are triaged and fixed.
• Experience working directly with engineering teams to drive fixes to completion.
• Ability to hold senior engineers and stakeholders to a shared deadline without formal authority over them.
• Comfort escalating to leadership with a clear, factual read of risk and status.
• Excellent written and verbal communication skills.
• Familiarity with SLA tracking, metrics, and retro-driven process improvement.
• Experience using or building AI-driven tooling for security triage, investigation, or decision support.

Even Better If You Have:

• Technical knowledge of complex systems and Cloud environments (AWS, GCP, Azure).
• Technical knowledge of network fundamentals and common Internet protocols.
• Technical knowledge of incident response frameworks with operational experience across Windows, Mac and Linux forensics

This candidate must be a U.S. citizen (U.S. born or naturalized) operating on U.S. Soil who does not hold dual citizenship with the ability to meet customer and government screening standards applicable to this role, including a Criminal Justice Information Services screening with fingerprint scan. Due to the citizenship requirements for this role, which supports U.S. federal, state, and/or local government customers, citizenship will be verified through two of the following REAL ID Act documents: U.S. Passport, Passport Card, REAL Driver's License, Global Entry Card, U.S. Government CAC/PIV. You agree to complete a Minimum Background Investigation (MBI) for a Moderate Public Trust position with the U.S. federal government and gain other clearances as deemed appropriate for the role.

This candidate must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship and agrees to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.

Unleash Your Potential

When you join Salesforce, you'll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we'll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future - but to redefine what's possible - for yourself, for AI, and the world.

Accommodations

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.

Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates' resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that's inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications - without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.

At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.The typical base salary range for this position is $172,500 - $260,100 annually. The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.