Vulnerability Management Engineer — AI-Driven Security

AppFolio; San Diego (CA); On-site; USD 104,000 - 130,000; Full time

Job summary

AppFolio is seeking a Vulnerability Management Specialist to join the Security Engineering team. You will validate, prioritize, and track vulnerabilities, respond to threats, and help strengthen our security posture across SaaS platforms.

Ideal candidates have 2–5 years in cybersecurity, scripting abilities (Ruby/Python), and hands-on experience with DefectDojo, Invicti, Wiz, or Cycode, plus familiarity with CVSS-based risk assessment. This role supports hybrid work in the San Diego area.

Qualifications

• 2-5 years in a related cybersecurity role, preferably in Vulnerability Management.
• Ability to write scripts in Ruby, Python, or other scripting languages.
• Hands-on experience with vulnerability management tools such as DefectDojo, Invicti, Wiz, or Cycode.
• Understanding of SAST/DAST/SCA and pen test tools.
• Proficiency in Linux, MacOS, and Windows operating systems.
• Strong communication skills and ability to explain security issues to stakeholders.
• Ability to prioritize vulnerabilities using CVSS and environment context.

Responsibilities

• Validate, prioritize, communicate, and track vulnerabilities to improve security posture.
• Respond to emerging threats and 0-day vulnerabilities as they are released.
• Ensure compliance with vulnerability management policies and drive adoption of best practices.
• Streamline processes with AI, ML, and automation to reduce time-to-action.
• Build trust with customers and partners through a strong vulnerability program.

Skills

Vulnerability Management

Scripting (Ruby/Python)

Communication Skills

OS Proficiency

Education

BS in Computer Science or related field

Tools

DefectDojo

Invicti

Wiz

Cycode

Job description

AppFolio is seeking a Vulnerability Management Specialist to join the Security Engineering team. You will validate, prioritize, and track vulnerabilities, respond to threats, and help strengthen our security posture across SaaS platforms.

Ideal candidates have 2–5 years in cybersecurity, scripting abilities (Ruby/Python), and hands-on experience with DefectDojo, Invicti, Wiz, or Cycode, plus familiarity with CVSS-based risk assessment. This role supports hybrid work in the San Diego area.