Vulnerability Management Engineer

Appfolio; Santa Barbara (CA); On-site; USD 104,000 - 130,000; Full time

Job summary

AppFolio is seeking a Vulnerability Management Specialist to join our Security Engineering team in Santa Barbara. You will validate and prioritize vulnerabilities, respond to emerging threats, and drive remediation with automation and best practices.

The role requires 2–5 years in a cybersecurity field and hands-on work with major VM tools. We value strong communication, cross-team collaboration, and the ability to explain complex issues to technical and non-technical stakeholders.

Qualifications

• 2-5 years of related cybersecurity experience, preferably with Vulnerability Management, Penetration Testing, or Incident Response
• Ability to write scripts in Ruby, Python, or other scripting languages
• Hands-on experience with Vulnerability Management tools such as DefectDojo, Invicti, Wiz, or Cycode
• Hands-on experience with manual testing tools, especially validating vulnerabilities
• Understanding the capabilities and limitations of SAST, DAST, SCA, and pen test tools
• Proficiency in Linux, MacOS, Windows
• Ability to assess security risks using CVSS and environmental factors
• Strong communication skills to explain complex security issues to stakeholders
• Ability to oversee complex security findings and drive remediation or risk acceptance

Responsibilities

• Validate, prioritize, communicate, and track vulnerabilities to improve AppFolio's security posture
• Respond to emerging threats and 0-day vulnerabilities
• Ensure compliance with vulnerability management policies and best practices
• Streamline vulnerability management using AI, ML, and automation to reduce time-to-action
• Build trust with customers and partners through a strong vulnerability management program

Skills

Vulnerability management

Scripting (Ruby/Python)

Security tooling

Communication skills

OS proficiency

Education

BS in Computer Science or related field

Cybersecurity certifications (GCIA, GCIH, CEH, CISSP, CISM, OSCP)

Project management certifications (CAPM, PMP)

Tools

DefectDojo

Invicti

Wiz

Cycode

Burp Suite

Tenable

Metasploit Framework

Job description

AppFolio is seeking a Vulnerability Management Specialist to join our Security Engineering team in Santa Barbara. You will validate and prioritize vulnerabilities, respond to emerging threats, and drive remediation with automation and best practices.

The role requires 2–5 years in a cybersecurity field and hands-on work with major VM tools. We value strong communication, cross-team collaboration, and the ability to explain complex issues to technical and non-technical stakeholders.