Lead Vulnerability Management Engineer — AI-Driven Remediation

WebHosting; Austin (TX); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity

Health benefits

Time off

Job summary

Cloudflare in Austin, TX is seeking a Lead Vulnerability Management Engineer to drive architecture, strategy, and remediation across global infrastructure. You will lead advanced vulnerability scanning, integrate AI-driven automation, and guide cross-functional teams with Engineering, Infrastructure, and Product to reduce risk.

You will work with GRC to support SOC-2, PCI-DSS, and FedRAMP audits, translate complex findings into clear technical and compliance actions, and mentor engineers on best

Qualifications

• 5+ years of Vulnerability Management experience in a senior or lead role.
• Bachelor’s degree in CS/InfoSec or security certifications.
• Strong communication and collaboration with engineering and product teams.
• Experience with Vulnerability scanning platforms such as Qualys, Nessus, Rapid7.

Responsibilities

• Serve as the primary technical lead for the Vulnerability Management team.
• Lead architecture, design, technology evaluation, and systems integration for the global VM program.
• Oversee advanced vulnerability scanning and validate findings to reduce false positives.
• Collaborate with engineering teams to remediate complex vulnerabilities.
• Strategically manage remediation backlog and report risk reduction trends.
• Design and implement AI-driven solutions to manage the vulnerability lifecycle.
• Contribute to global vulnerability management standards, procedures, and playbooks.
• Liaise with GRC to support audits (SOC-2, PCI-DSS, FedRAMP).
• Own reporting and evidence generation for audits; ensure scanning cadences.
• Translate evolving regulatory requirements into actionable scanning policies.

Skills

Vulnerability management

AI automation

Python scripting

Cross-functional collaboration

Communication skills

Education

Bachelor’s degree in Computer Science/Information Security

Security certifications (e.g., CISSP, CISM)

Tools

Qualys

Nessus

Rapid7 InsightVM

JIRA

Opencode/Windsurf (AI tooling)

Job description

Cloudflare in Austin, TX is seeking a Lead Vulnerability Management Engineer to drive architecture, strategy, and remediation across global infrastructure. You will lead advanced vulnerability scanning, integrate AI-driven automation, and guide cross-functional teams with Engineering, Infrastructure, and Product to reduce risk.

You will work with GRC to support SOC-2, PCI-DSS, and FedRAMP audits, translate complex findings into clear technical and compliance actions, and mentor engineers on best