below marketmost similar roles pay hereabove market
This role pays more than
91%
of similar roles. Most pay
$151,264–$210,500
— the blue band above.
At the midpoint, this role pays about
$256k
versus about
$181k
for comparable roles.
Based on 240 similar postings.
Employer
About Salesforce
Salesforce is the world''s leading customer relationship management (CRM) platform, offering cloud-based software for sales, service, marketing, analytics, and application development. Industry: Enterprise Software & Cloud Computing
Salesforce currently has
221 open roles
on FindRole.
Listed pay typically runs
$148,500–$260,100
across 125 roles with salary data.
As a Vulnerability Operations and Response Principal, you will own the strategy, design, and scaling of the enterprise vulnerability management framework across multi-cloud environments and emerging AI and machine learning deployments. You will lead the internal vulnerability operations roadmap, building specialized security governance for AI workloads, including model supply chain risks and prompt injection pathways. Your daily work involves identifying and neutralizing infrastructure vulnerabilities, software flaws, and novel AI-specific risks while designing automated scanning and ticketing orchestration pipelines. You will utilize the Common Vulnerability Scoring System (CVSS), Exploit Prediction Scoring System (EPSS), and Known Exploited Vulnerabilities (KEV) catalog. Key technical competencies include securing containerized environments like Kubernetes and Docker, using infrastructure-as-code tools like Terraform and CloudFormation, and managing CI/CD security gating.
Own the end-to-end internal vulnerability operations roadmap for infrastructure, containers, and microservices.
Build and enforce security governance frameworks for AI and ML workloads, including model supply chain risks.
Lead high-profile vulnerability incident response operations and improve processes for partner teams.
Partner with engineering and product leaders to build capabilities that minimize exposure across the vulnerability lifecycle.
Design automated scanning, intelligent triage, and ticketing orchestration pipelines to eliminate manual overhead.
Report systemic posture trends, AI threat vectors, and SLA performance to executive leadership and C-level stakeholders.
What we're looking for
8+ years of deep technical experience in enterprise vulnerability management, product security, infrastructure security, or security architecture at cloud scale.
Principal-level expertise in threat-informed vulnerability prioritization frameworks including CVSS, EPSS, and the KEV catalog.
Strong understanding of emerging AI and ML architectures, including LLM security risks, supply chain vulnerabilities, and AI pipeline exposures.
Proven success influencing senior engineering and product stakeholders to drive systemic remediation across complex enterprise software environments.
Ability to communicate complex technical risk and strategic remediation roadmaps to executive leadership and non-technical stakeholders.
Bachelor's degree in a technical field such as computer science, cybersecurity, information systems, or engineering, or equivalent technical education.
Experience building automated CI/CD security gating, automated ticket routing, and orchestration workflows (preferred).
Hands-on experience securing containerized environments like Kubernetes and Docker, and infrastructure-as-code tools like Terraform or CloudFormation (preferred).
Industry certifications such as CISSP, CISM, or specialized cloud or security architecture credentials (preferred).
AI
Automation
Video Analytics
Access Control Systems
ISO 27001
SOC 2
KPIs
SLAs
Incident Management
Workflow Automation
Generative AI
Data Logging
Physical Security Infrastructure
Mass Notification Platforms
Threat Intelligence