AI-Driven Vulnerability Management Engineer

CloudFlare; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Equity plan

Job summary

Cloudflare is seeking a VM Engineer to identify, analyse and remediate vulnerabilities across Cloudflare’s infrastructure and cloud environments. You will work with Engineering, Infrastructure and Compliance to triage findings, meet SLAs and drive timely remediation.

The role emphasizes AI-driven tooling and alignment with IL4, FedRAMP and other compliance requirements. London-based with potential for other locations.

Qualifications

• DoD IL4, FedRAMP, SOC-2 and PCI frameworks knowledge required.
• 3+ years Vulnerability Management experience in regulated environments.
• Bachelor’s degree in Computer Science, Information Security or related certifications.

Responsibilities

• Conduct vulnerability scanning and analyze findings to verify accuracy.
• Triage and prioritise vulnerabilities with risk-based approaches.
• Develop remediation guidance for infra and apps.
• Support DOD IL4 and FedRAMP preparation with evidence and controls.
• Embed vulnerability management into delivery pipelines and processes.
• Utilise AI tools to accelerate triage and remediation guidance.
• Collaborate with engineering to track status and progress.
• Manage remediation backlog focusing on risk reduction.
• Contribute to security playbooks and standards alignment.

Skills

DoD IL4 knowledge

FedRAMP knowledge

SOC-2 & PCI familiarity

Vulnerability triage

Communication skills

AI-assisted remediation

Analytical thinking

Vulnerability scanning tools

Team collaboration

Education

Bachelor's in CS or Info Security

Tools

Qualys

Nessus

Rapid7 InsightVM

Job description

Cloudflare is seeking a VM Engineer to identify, analyse and remediate vulnerabilities across Cloudflare’s infrastructure and cloud environments. You will work with Engineering, Infrastructure and Compliance to triage findings, meet SLAs and drive timely remediation.

The role emphasizes AI-driven tooling and alignment with IL4, FedRAMP and other compliance requirements. London-based with potential for other locations.