AI-Driven Lead Vulnerability Management Architect

Triwill Group; United States; Hybrid; USD 160,000 - 210,000; Full time

Benefits offered by this job

Equity plan

Health insurance

401(k)

Job summary

Cloudflare is seeking a Lead Vulnerability Management Engineer to own the architecture, design, and strategic direction of our vulnerability management program. You will drive integration across global infrastructure and cloud environments, mentor a technical team, and advance AI-powered remediation workflows.

The role requires strong experience in vulnerability scanning, risk-based prioritization, and collaboration with Engineering, GRC, and Product teams.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 5+ years in Vulnerability Management, with senior/lead experience.
• Strong communication and collaboration with technical and non-technical teams.
• Experience supporting GRC/audits (PCI-DSS, SOC-2, ISO 27001).
• Ability to translate compliance policies into scanning configurations and remediation SLAs.

Responsibilities

• Serve as primary technical lead for the Vulnerability Management team.
• Lead architecture, design, and integration for the global VM program.
• Oversee advanced vulnerability scanning and triage of findings.
• Collaborate with engineering to remediate complex vulnerabilities.
• Design AI-driven remediation workflows to automate tasks.
• Maintain remediation backlog and report risk trends.
• Translate regulatory requirements into precise scanning policies.

Skills

Vulnerability Management

Leadership

Communication

AI automation

GRC awareness

Cloud security

Python scripting

Education

Bachelor's in CS or InfoSec

Tools

Qualys

Nessus

InsightVM

Job description

Cloudflare is seeking a Lead Vulnerability Management Engineer to own the architecture, design, and strategic direction of our vulnerability management program. You will drive integration across global infrastructure and cloud environments, mentor a technical team, and advance AI-powered remediation workflows.

The role requires strong experience in vulnerability scanning, risk-based prioritization, and collaboration with Engineering, GRC, and Product teams.