Vulnerability Management Specialist

AppFolio, Inc.; San Diego (CA); Hybrid; USD 104,000 - 130,000; Full time

Job summary

AppFolio is seeking a Vulnerability Management Specialist to join our security engineering team in a hybrid, full-time role. You will assess and prioritize security vulnerabilities across our SaaS platforms and applications, guiding remediation with cross-functional stakeholders.

You will apply CVSS-based risk analysis, participate in vulnerability management processes, and help drive automation using AI/ML to accelerate response.

Qualifications

• 2-5 years of experience in a related cybersecurity role, preferably with a focus on Vulnerability Management, Penetration Testing, or Incident Response.
• Ability to write scripts in Ruby, Python, or other scripting languages
• Hands-on experience with Vulnerability Management tools such as DefectDojo, Invicti, Wiz, or Cycode.
• Hands-on experience with manual testing tools, especially validating vulnerabilities
• Understanding the capabilities and limitations of SAST, DAST, SCA, and pen test tools.
• Proficiency in various operating systems (Linux, MacOS, Windows)
• Ability to assess security risks associated with vulnernabilities and prioritize them using existing frameworks like CVSS, accounting for local environmental factors.
• Strong communication skills and an ability to explain complex security issues to technical and non-technical stakeholders
• Ability to maintain strict organization while overseeing complex security findings, applying structured project-style oversight to guide multiple simultaneous vulnerabilities to remediation or risk acceptance.

Responsibilities

• You will validate, prioritize, communicate, and track vulnerabilities to continuously improve the overall security posture of AppFolio technology systems and applications.
• You will respond to emerging threats and potential security events as 0-day vulnerabilities are released.
• You will work to ensure compliance with our vulnerability management policies, processes, and procedures, and drive the adoption of emerging industry best practices.
• You will help streamline the vulnerability management process through the use of Artificial Intelligence, Machine Learning, and automation, improving the end-to-end process and reducing the time-to-action for known vulnerabilities.
• Through an exceptional vulnerability management program, you will build trust and confidence with our customers and partners.

Skills

Ruby/Python scripting

Vulnerability management

Penetration testing

Incident response

GCIA

GCIH

CEH

CISSP

CISM

OSCP

Education

BS in Computer Science

Tools

DefectDojo

Invicti

Wiz

Cycode

Burp Suite

Tenable

Job description

Office Hub - San Diego, CA; Office Hub - Dallas, TX; Office Hub - Santa Barbara; Remote Hub - Atlanta, GA; Remote Hub - Chicago, IL; Remote Hub - Denver, CO; Remote Hub - San Francisco, CA; Remote Hub - Washington, DC

Employment Type

Full time

Location Type

Hybrid

Department

Information Security

Compensation

AppFolio is more than a company. We’re a community of dreamers, big thinkers, problem solvers, active listeners, and multipliers. At every opportunity, we set the pace while delivering innovation built to carry real estate into the future. One in which every experience feels effortless, yet meaningful. Where customers are empowered to take on any opportunity. We show up as one team, connected by our values to be a force for good. Because together, we have the power to create extraordinary outcomes for our customers, our communities, and ourselves.

At AppFolio, we paddle as one. We ride and make waves together, with a relentless focus on building great products for the way our customers work and live today – and tomorrow. AppFolio is a destination organization where careers are made and accelerated. Here, innovation is a team sport.

As a Vulnerability Management Specialist, you will contribute to security initiatives and work on high-impact projects as a member of the security engineering team. You will provide expertise and support to your team members in your areas of strength. Staying abreast of industry trends and technology is key to this role, and you will actively seek to continue to develop your skills and competencies with our support.

Success in this role requires a strong passion for computer, network, and application security. Experience in vulnerability management at a Software-as-a-Service company is preferred.

Your impact

You will validate, prioritize, communicate, and track vulnerabilities to continuously improve the overall security posture of AppFolio technology systems and applications.

You will respond to emerging threats and potential security events as 0-day vulnerabilities are released.

You will work to ensure compliance with our vulnerability management policies, processes, and procedures, and drive the adoption of emerging industry best practices.

You will help streamline the vulnerability management process through the use of Artificial Intelligence, Machine Learning, and automation, improving the end-to-end process and reducing the time-to-action for known vulnerabilities.

Through an exceptional vulnerability management program, you will build trust and confidence with our customers and partners.

Qualifications

BS in Computer Science or a related technical discipline, or equivalent industry experience

Cybersecurity-relevant certifications, such as but not limited to GCIA, GCIH, CEH, CISSP, CISM, or OSCP

Project management-relevant certifications, such as but not limited to CAPM or PMP

Must have

2-5 years of experience in a related cybersecurity role, preferably with a focus on Vulnerability Management, Penetration Testing, or Incident Response.

Ability to write scripts in Ruby, Python, or other scripting languages

Hands-on experience with Vulnerability Management tools such as DefectDojo, Invicti, Wiz, or Cycode.

Hands-on experience with manual testing tools, especially validating vulnerabilities

Understanding the capabilities and limitations of SAST, DAST, SCA, and pen test tools.

Proficiency in various operating systems (Linux, MacOS, Windows)

Ability to assess security risks associated with vulnernabilities and prioritize them using existing frameworks like CVSS, accounting for local environmental factors.

Strong communication skills and an ability to explain complex security issues to technical and non-technical stakeholders

Ability to maintain strict organization while overseeing complex security findings, applying structured project-style oversight to guide multiple simultaneous vulnerabilities to remediation or risk acceptance.

Nice to Have

Hands-on experience with network protocol vulnerabilities

Experience identifying and managing vulnerabilities during CI/CD

Hands-on experience in cloud environments (AWS, GCP, Azure)

Hands-on experience with Burp Suite and Tenable or similar

Hands-on experience with Metasploit Framework or similar

The compensation that we reasonably expect to pay for this role is: $104,000 - $130,000 base pay. The actual compensation for this role will be determined by a variety of factors, including but not limited to the candidate’s skills, education, experience, and internal equity.

Please note that compensation is just one aspect of a comprehensive Total Rewards package. The compensation range listed here does not include additional benefits or any discretionary bonuses you may be eligible for based on your role and/or employment type.

Regular full-time employees are eligible for benefits - see here .

About AppFolio

AppFolio is the technology leader powering the future of the real estate industry. Our innovative platform and trusted partnership enable our customers to connect communities, increase operational efficiency, and grow their business. For more information about AppFolio, visit appfolio.com .

Why AppFolio

Grow

We enable a culture of high performance, where delivering results is recognized by opportunities for growth and compelling total rewards. Our challenging and meaningful work drive the growth of our business, and ourselves.

Learn

We partner with you to realize your potential by investing in you from the start. We're cultivating a team of big thinkers through coaching and mentorship with our best-in-class leaders, and giving you the time and tools to develop your skills.

Impact

We are creating a world where living in, investing in, managing, and supporting communities feels magical and effortless, freeing people to thrive. We do this by innovating with purpose while cultivating a culture of impact. We learn as much from each other as we do our customers and our communities.

Connect

We excel at hybrid work by fostering an environment that feels flexible, personal and connected, no matter where we are. We create space to fuel innovation and collaboration, and we come together to celebrate, connect, and succeed.

At AppFolio, we value diversity in backgrounds and perspectives and depend on it to drive our innovative culture. That’s why we’re a proud Equal Opportunity Employer, and we believe that our products, our teams, and our business are stronger because of it. This means that no matter what race, color, religion, sex, sexual orientation, gender identification, national origin, age, marital status, ancestry, physical or mental disability, or veteran status, you’re always welcome at AppFolio.