Vulnerability Management Specialist

Vulnerability Management Specialist on AppFolio's security engineering team, responsible for validating, prioritising, communicating and tracking vulnerabilities across the company's systems and applications. The specialist responds when new zero-day vulnerabilities emerge, keeps the program aligned with policy, guides many findings at once through remediation or risk acceptance, and uses AI, machine learning and automation to shorten the time from discovery to fix.

AppFolio wants two to five years in a cybersecurity role, ideally vulnerability management, penetration testing or incident response, scripting in Ruby or Python, hands-on tools such as DefectDojo, Invicti, Wiz or Cycode, manual validation of findings, and CVSS-based risk judgment. Certifications such as GCIH, OSCP or CISSP are expected. The role is hybrid from AppFolio's hubs, including San Diego.