AI-Driven Vulnerability Management Engineer

Cloudflare; Greater London; On-site; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Equity plan

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Retirement Savings Plan

Employee Stock Participation

Job summary

Cloudflare seeks an experienced Vulnerability Management Engineer to identify, analyse, and remediate security vulnerabilities across Cloudflare's infrastructure and cloud environments. You will partner with Engineering, Infrastructure, and Compliance to triage findings, ensure timely remediation, and align with IL4, FedRAMP and other standards.

AI-driven tooling will be used to speed up triage and automation, with a strong emphasis on risk reduction.

Qualifications

• Must have experience with DoD IL4, FedRAMP, SOC-2 and PCI frameworks.
• 3+ years Vulnerability Management experience in regulated environments.
• Bachelor's degree or security certifications in related fields.
• Strong communication skills and ability to collaborate across teams.
• Solid understanding of CVSS and applying risk assessment methods.

Responsibilities

• Conduct vulnerability scanning and in-depth analysis of findings from tools.
• Triage, validate and prioritise vulnerabilities with risk-based approaches.
• Develop remediation guidance for engineering and infrastructure teams.
• Support IL4 and FedRAMP preparation with compliant evidence and controls.
• Embed vulnerability management into delivery pipelines and change management.
• Leverage AI tools to accelerate triage and remediation guidance.
• Report status and remediation progress to engineering teams.
• Manage remediation backlog with focus on reducing risk.
• Contribute to improving vulnerability management standards and playbooks.

Skills

IL4 & FedRAMP

Vulnerability management

Communication

CVSS risk

Nessus Qualys Rapid7

AI security tools

Education

Bachelor's degree in CS or information security

Tools

Nessus

Qualys

Rapid7 InsightVM

Jira

Job description

Cloudflare seeks an experienced Vulnerability Management Engineer to identify, analyse, and remediate security vulnerabilities across Cloudflare's infrastructure and cloud environments. You will partner with Engineering, Infrastructure, and Compliance to triage findings, ensure timely remediation, and align with IL4, FedRAMP and other standards.

AI-driven tooling will be used to speed up triage and automation, with a strong emphasis on risk reduction.