Vulnerability Management Engineer

Appfolio; Washington (District of Columbia); On-site; USD 104,000 - 130,000; Full time

Job summary

AppFolio in Washington, DC is seeking a Vulnerability Management Specialist to join the Security Engineering team. You will prioritize and track vulnerabilities across AppFolio's technology stack, respond to threats, and help enforce vulnerability management policies with a focus on automation and AI/ML.

The role requires 2-5 years in cybersecurity, scripting ability, and hands-on experience with tools like DefectDojo, Invicti, Wiz, Cycode, Burp Suite, and Metasploit.

Qualifications

• BS in Computer Science or a related technical discipline, or equivalent industry experience.
• Cybersecurity certifications (GCIA, GCIH, CEH, CISSP, CISM, OSCP) preferred.
• Project management certifications (CAPM, PMP) recommended.
• 2-5 years of experience in a cybersecurity role ( vulnerability management / penetration testing / incident response ).
• Ability to write scripts in Ruby, Python, or other scripting languages.
• Hands-on experience with vulnerability management tools (DefectDojo, Invicti, Wiz, Cycode).
• Hands-on experience with manual testing tools, especially validating vulnerabilities.
• Familiarity with CVSS, risk prioritization, and security frameworks.
• Proficiency with Linux / MacOS / Windows.
• Strong communication and ability to explain technical issues to diverse stakeholders.

Responsibilities

• Validate, prioritize, communicate, and track vulnerabilities to improve security posture.
• Respond to emerging threats and 0-day vulnerabilities as they are released.
• Help enforce vulnerability management policies and drive best practices adoption.
• Support automation initiatives using AI/ML to streamline remediation.
• Build trust with customers and partners through a robust vulnerability program.

Skills

Vulnerability management

Scripting (Ruby/Python)

Incident response

Communication

Risk assessment

Project management

Education

BS in Computer Science or related discipline

Tools

DefectDojo

Invicti

Wiz

Cycode

Burp Suite

Metasploit Framework

Job description

AppFolio in Washington, DC is seeking a Vulnerability Management Specialist to join the Security Engineering team. You will prioritize and track vulnerabilities across AppFolio's technology stack, respond to threats, and help enforce vulnerability management policies with a focus on automation and AI/ML.

The role requires 2-5 years in cybersecurity, scripting ability, and hands-on experience with tools like DefectDojo, Invicti, Wiz, Cycode, Burp Suite, and Metasploit.