Remote Vulnerability Management Engineer

AppFolio, Inc.; San Diego, Northern (CA, KY); Hybrid; USD 104,000 - 130,000; Full time

Job summary

AppFolio is seeking a Vulnerability Management Specialist to join our security engineering team. You will validate and prioritize vulnerabilities, respond to threats, and drive automation improvements across our SaaS platforms.

Ideal candidates have 2-5 years in cybersecurity, experience with DefectDojo/Invicti/Wiz/Cycode, and scripting in Ruby or Python. Strong communication and cross‑functional collaboration are essential, as we integrate with multiple environments and teams.

Qualifications

• BS in Computer Science or related field.
• Cybersecurity certifications such as GCIA, GCIH, CEH, CISSP, CISM, or OSCP.
• Project management certifications such as CAPM or PMP.
• 2-5 years of experience in a related cybersecurity role, preferably with Vulnerability Management, Penetration Testing, or Incident Response.
• Ability to write scripts in Ruby, Python, or other scripting languages.
• Hands-on experience with vulnerability management tools such as DefectDojo, Invicti, Wiz, or Cycode.
• Hands-on experience with manual testing tools, especially validating vulnerabilities.
• Understanding SAST, DAST, SCA, and pen test tools.
• Proficiency in Linux, MacOS, Windows.
• Ability to assess security risks using CVSS and environmental factors.
• Strong communication skills to explain issues to technical and non-technical stakeholders.
• Ability to oversee complex vulnerabilities with structured project-style oversight.

Responsibilities

• Validate, prioritize, communicate, and track vulnerabilities to improve security posture.
• Respond to emerging threats and 0-day vulnerabilities.
• Ensure compliance with vulnerability management policies and adopt best practices.
• Streamline vulnerability management with AI, ML, and automation.
• Build trust with customers and partners through a strong vulnerability program.

Skills

Vulnerability Management

Ruby

Python

Communication skills

OS familiarity

Education

BS in Computer Science

Tools

DefectDojo

Invicti

Wiz

Cycode

Burp Suite

Metasploit

Job description

AppFolio is seeking a Vulnerability Management Specialist to join our security engineering team. You will validate and prioritize vulnerabilities, respond to threats, and drive automation improvements across our SaaS platforms.

Ideal candidates have 2-5 years in cybersecurity, experience with DefectDojo/Invicti/Wiz/Cycode, and scripting in Ruby or Python. Strong communication and cross‑functional collaboration are essential, as we integrate with multiple environments and teams.