Vulnerability Management Engineer — AI-Driven Security

AppFolio; Santa Barbara (CA); Hybrid; USD 104,000 - 130,000; Full time

Job summary

AppFolio is seeking a Vulnerability Management Specialist to join our security engineering team. You’ll validate, prioritize, and track vulnerabilities to strengthen our security posture across SaaS platforms, responding to 0-day threats and ensuring policy compliance while leveraging automation to improve remediation cycles.

The role requires 2–5 years in cybersecurity, scripting in Ruby/Python, and hands-on experience with DefectDojo, Invicti, Wiz, Cycode, plus Burp Suite or Metasploit.

Qualifications

• 2–5 years of experience in a related cybersecurity role, preferably with Vulnerability Management, Penetration Testing, or Incident Response.
• Ability to write scripts in Ruby, Python, or other scripting languages.
• Hands-on experience with vulnerability management tools such as DefectDojo, Invicti, Wiz, or Cycode.
• Hands-on experience with manual testing tools, especially validating vulnerabilities.
• Understanding CVSS and risk-based prioritization in context of local factors.
• Proficiency in Linux, MacOS, and Windows operating systems.
• Strong communication skills and ability to explain security issues to both technical and non-technical stakeholders.
• Ability to oversee complex security findings with structured, project-style remediation workflows.

Responsibilities

• Validate, prioritize, communicate, and track vulnerabilities to improve AppFolio’s security posture.
• Respond to emerging threats and security events as 0-day vulnerabilities are released.
• Ensure compliance with vulnerability management policies and drive adoption of best practices.
• Streamline the process using AI, ML, and automation to shorten remediation time.
• Build trust with customers and partners through a robust vulnerability program.

Skills

Vulnerability management

Scripting (Ruby/Python)

Strong communication

Security incident response

Education

BS in Computer Science or related field

Tools

DefectDojo

Invicti

Wiz

Cycode

Burp Suite

Metasploit Framework

Job description

AppFolio is seeking a Vulnerability Management Specialist to join our security engineering team. You’ll validate, prioritize, and track vulnerabilities to strengthen our security posture across SaaS platforms, responding to 0-day threats and ensuring policy compliance while leveraging automation to improve remediation cycles.

The role requires 2–5 years in cybersecurity, scripting in Ruby/Python, and hands-on experience with DefectDojo, Invicti, Wiz, Cycode, plus Burp Suite or Metasploit.