Vulnerability Management Engineer (Hybrid/Remote)

AppFolio, Inc.; San Diego (CA); Ibrido; USD 104.000 - 130.000; Tempo pieno

Descrizione del lavoro

AppFolio is seeking a Vulnerability Management Specialist to join our security engineering team in a hybrid, full-time role. You will assess and prioritize security vulnerabilities across our SaaS platforms and applications, guiding remediation with cross-functional stakeholders.

You will apply CVSS-based risk analysis, participate in vulnerability management processes, and help drive automation using AI/ML to accelerate response.

Competenze

• 2-5 years of experience in a related cybersecurity role, preferably with a focus on Vulnerability Management, Penetration Testing, or Incident Response.
• Ability to write scripts in Ruby, Python, or other scripting languages
• Hands-on experience with Vulnerability Management tools such as DefectDojo, Invicti, Wiz, or Cycode.
• Hands-on experience with manual testing tools, especially validating vulnerabilities
• Understanding the capabilities and limitations of SAST, DAST, SCA, and pen test tools.
• Proficiency in various operating systems (Linux, MacOS, Windows)
• Ability to assess security risks associated with vulnernabilities and prioritize them using existing frameworks like CVSS, accounting for local environmental factors.
• Strong communication skills and an ability to explain complex security issues to technical and non-technical stakeholders
• Ability to maintain strict organization while overseeing complex security findings, applying structured project-style oversight to guide multiple simultaneous vulnerabilities to remediation or risk acceptance.

Mansioni

• You will validate, prioritize, communicate, and track vulnerabilities to continuously improve the overall security posture of AppFolio technology systems and applications.
• You will respond to emerging threats and potential security events as 0-day vulnerabilities are released.
• You will work to ensure compliance with our vulnerability management policies, processes, and procedures, and drive the adoption of emerging industry best practices.
• You will help streamline the vulnerability management process through the use of Artificial Intelligence, Machine Learning, and automation, improving the end-to-end process and reducing the time-to-action for known vulnerabilities.
• Through an exceptional vulnerability management program, you will build trust and confidence with our customers and partners.

Conoscenze

Ruby/Python scripting

Vulnerability management

Penetration testing

Incident response

GCIA

GCIH

CEH

CISSP

CISM

OSCP

Formazione

BS in Computer Science

Strumenti

DefectDojo

Invicti

Wiz

Cycode

Burp Suite

Tenable

Descrizione del lavoro

AppFolio is seeking a Vulnerability Management Specialist to join our security engineering team in a hybrid, full-time role. You will assess and prioritize security vulnerabilities across our SaaS platforms and applications, guiding remediation with cross-functional stakeholders.

You will apply CVSS-based risk analysis, participate in vulnerability management processes, and help drive automation using AI/ML to accelerate response.