Hybrid Vulnerability Management Engineer | SaaS Security

AppFolio Inc; San Diego (CA); On-site; USD 104,000 - 130,000; Full time

Job summary

AppFolio is seeking a Vulnerability Management Specialist to join the security engineering team. You will drive vulnerability prioritization, validation, and remediation to strengthen the security posture across AppFolio's SaaS platform.

The role emphasizes staying current with industry trends, communicating with technical and non-technical stakeholders, and driving best practices in vulnerability management. Prior SaaS experience is preferred.

Qualifications

• 2–5 years in cybersecurity, focusing on vulnerability management, pentesting, or IR.
• Ability to write scripts in Ruby, Python, or similar.
• Hands-on with vulnerability management tools (DefectDojo, Invicti, Wiz, Cycode).
• Hands-on with manual testing tools for vulnerability validation.
• Knowledge of SAST/DAST/Software Composition Analysis and pen test tools.

Responsibilities

• Validate, prioritize, communicate, and track vulnerabilities to improve security posture.
• Respond to emerging threats and 0-day vulnerabilities as they arise.
• Ensure compliance with vulnerability management policies and adopt best practices.
• Streamline processes using AI, ML, and automation to reduce remediation time.
• Build trust with customers and partners through a strong vulnerability program.

Skills

Scripting (Ruby)

Scripting (Python)

Communication

Security risk assessment

Vulnerability management

CI/CD security

OS proficiency

Threat detection

Stakeholder reporting

Education

Bachelor's degree in CS or related field

Cybersecurity certifications (GCIA, GCIH, CEH, CISSP, CISM, OSCP)

Tools

DefectDojo

Invicti

Wiz

Cycode

Burp Suite

Tenable

Metasploit Framework

Job description

AppFolio is seeking a Vulnerability Management Specialist to join the security engineering team. You will drive vulnerability prioritization, validation, and remediation to strengthen the security posture across AppFolio's SaaS platform.

The role emphasizes staying current with industry trends, communicating with technical and non-technical stakeholders, and driving best practices in vulnerability management. Prior SaaS experience is preferred.