Vulnerability Management Engineer | AI-Driven Security

Appfolio; Goleta (CA); On-site; USD 104,000 - 130,000; Full time

Job summary

AppFolio is seeking a Vulnerability Management Specialist to join our security engineering team in Goleta, CA. You will validate, prioritize, and track vulnerabilities, respond to emerging threats, and help drive adoption of best practices, AI/ML, and automation to shorten remediation cycles.

Ideal candidates have 2–5 years in cybersecurity (Vulnerability Management, PT or IR), scripting ability (Python or Ruby), and hands-on experience with DefectDojo, Invicti, Wiz, or Cycode.

Qualifications

• 2–5 years of experience in a related cybersecurity role, preferably with vulnerability management, penetration testing, or incident response.
• Ability to write scripts in Python or Ruby.
• Hands-on experience with vulnerability management tools such as DefectDojo, Invicti, Wiz, or Cycode.
• Hands-on experience with manual testing tools, especially validating vulnerabilities.
• Understanding SAST, DAST, SCA, and pen test tool capabilities.

Responsibilities

• Validate, prioritize, communicate, and track vulnerabilities to improve security posture.
• Respond to emerging threats and potential security events as 0-day vulnerabilities are released.
• Ensure compliance with vulnerability management policies and drive adoption of best practices.
• Help streamline the vulnerability management process using AI, ML, and automation.
• Build trust with customers and partners through a strong vulnerability management program.

Skills

Vulnerability management

Scripting: Python or Ruby

Security tooling

Communication skills

Cross-platform OS

Education

BS in Computer Science or related field

Tools

DefectDojo

Invicti

Wiz

Cycode

Burp Suite

Tenable

Metasploit

Job description

AppFolio is seeking a Vulnerability Management Specialist to join our security engineering team in Goleta, CA. You will validate, prioritize, and track vulnerabilities, respond to emerging threats, and help drive adoption of best practices, AI/ML, and automation to shorten remediation cycles.

Ideal candidates have 2–5 years in cybersecurity (Vulnerability Management, PT or IR), scripting ability (Python or Ruby), and hands-on experience with DefectDojo, Invicti, Wiz, or Cycode.