Vulnerability Management Engineer – AI-Driven Security

Appfolio; San Diego (CA); Hybrid; USD 104,000 - 130,000; Full time

Job summary

AppFolio seeks a Vulnerability Management Specialist to join our security engineering team. You will validate and prioritize vulnerabilities, respond to threats, and help streamline processes with automation.

A 2–5 year background in cybersecurity and experience with tools like DefectDojo, Invicti, Wiz, or Cycode are valued, along with scripting skills in Ruby or Python. You will operate in a hybrid environment, collaborate across teams, and contribute to a mature vulnerability program at a SaaS

Qualifications

• 2–5 years in a related cybersecurity role, focused on vulnerability management, pen testing, or incident response.
• Ability to write scripts in Ruby, Python, or other scripting languages.
• Hands-on experience with vulnerability management tools (DefectDojo, Invicti, Wiz, Cycode).
• Hands-on experience with manual testing tools for validating vulnerabilities.
• Understanding SAST/DAST/SCA and pen test tools; proficient across Linux, MacOS and Windows.

Responsibilities

• Validate, prioritize, communicate, and track vulnerabilities to improve security posture.
• Respond to emerging threats and 0-day vulnerabilities as they are released.
• Ensure compliance with vulnerability management policies and adopt best practices.
• Streamline vulnerability management using AI/ML and automation to reduce time-to-action.
• Build trust with customers and partners through a strong vulnerability program.

Skills

Ruby

Python

Linux

MacOS

Windows

Scripting

Strong communication

Education

Bachelor's degree in Computer Science or related field

Cybersecurity certifications (GCIA, GCIH, CEH, CISSP, CISM, OSCP)

Project management certifications (CAPM, PMP)

Tools

DefectDojo

Invicti

Wiz

Cycode

Burp Suite

Tenable

Metasploit Framework

Job description

AppFolio seeks a Vulnerability Management Specialist to join our security engineering team. You will validate and prioritize vulnerabilities, respond to threats, and help streamline processes with automation.

A 2–5 year background in cybersecurity and experience with tools like DefectDojo, Invicti, Wiz, or Cycode are valued, along with scripting skills in Ruby or Python. You will operate in a hybrid environment, collaborate across teams, and contribute to a mature vulnerability program at a SaaS