Vulnerability Management Specialist

Office Hub
- San Diego, CA;
Office Hub
- Dallas, TX;
Office Hub
- Santa Barbara;
Remote Hub
- Atlanta, GA;
Remote Hub
- Chicago, IL;
Remote Hub
- Denver, CO;
Remote Hub
- San Francisco, CA;
Remote Hub
- Washington, DC

Full time

Hybrid

Information Security

App Folio is more than a company. We’re a community of dreamers, big thinkers, problem solvers, active listeners, and multipliers. At every opportunity, we set the pace while delivering innovation built to carry real estate into the future. One in which every experience feels effortless, yet meaningful. Where customers are empowered to take on any opportunity. We show up as one team, connected by our values to be a force for good.

Because together, we have the power to create extraordinary outcomes for our customers, our communities, and ourselves.

At App Folio, we paddle as one. We ride and make waves together, with a relentless focus on building great products for the way our customers work and live today – and tomorrow. App Folio is a destination organization where careers are made and accelerated. Here, innovation is a team sport.

As a Vulnerability Management Specialist, you will contribute to security initiatives and work on high-impact projects as a member of the security engineering team. You will provide expertise and support to your team members in your areas of strength. Staying abreast of industry trends and technology is key to this role, and you will actively seek to continue to develop your skills and competencies with our support.

Success in this role requires a strong passion for computer, network, and application security. Experience in vulnerability management at a Software-as-a-Service company is preferred.

You will validate, prioritize, communicate, and track vulnerabilities to continuously improve the overall security posture of App Folio technology systems and applications.

You will respond to emerging threats and potential security events as 0-day vulnerabilities are released.

You will work to ensure compliance with our vulnerability management policies, processes, and procedures, and drive the adoption of emerging industry best practices.

You will help streamline the vulnerability management process through the use of Artificial Intelligence, Machine Learning, and automation, improving the end-to-end process and reducing the time-to-action for known vulnerabilities.

Through an exceptional vulnerability management program, you will build trust and confidence with our customers and partners.

BS in Computer Science or a related technical discipline, or equivalent industry experience

Cybersecurity-relevant certifications, such as but not limited to GCIA, GCIH, CEH, CISSP, CISM, or OSCP

Project management-relevant certifications, such as but not limited to CAPM or PMP

2-5 years of experience in a related cybersecurity role, preferably with a focus on Vulnerability Management, Penetration Testing, or Incident Response.

Ability to write scripts in Ruby, Python, or other scripting languages

Hands-on experience with Vulnerability Management tools such as Defect Dojo, Invicti, Wiz, or Cycode.

Hands-on experience with manual testing tools, especially validating vulnerabilities

Understanding the capabilities and limitations of SAST, DAST, SCA, and pen test tools.

Proficiency in various operating systems (Linux, MacOS, Windows)

Ability to assess security risks associated with vulnernabilities and prioritize them using existing frameworks like CVSS, accounting for local environmental factors.

Strong communication skills and an ability to explain complex security issues to technical and non-technical stakeholders

Ability to maintain strict organization while overseeing…