Vulnerability Management Engineer

Cloudflare

21 days ago

Remote, Worldwide

Mid Level / Senior

H1B Sponsor

Responsibilities

Conduct vulnerability scanning and perform in-depth analysis of findings from scanning tools.
Triage, validate, and prioritize vulnerabilities using risk-based approaches.
Develop, document, and deliver technical remediation guidance and solutions.
Support DOD IL4 and FedRAMP preparation by ensuring compliance with regulatory requirements.
Work closely with engineering and service teams to embed vulnerability management into processes.
Establish strong relationships with engineering teams to track remediation progress.
Manage and track the remediation backlog focusing on risk reduction.
Contribute to the continuous improvement of vulnerability management standards and procedures.

Solid understanding of DoD Impact level IL4, FedRAMP, SOC-2, and PCI frameworks.
3+ years of vulnerability management experience in a heavily regulated environment.
Bachelor's degree in Computer Science, Information Security, or related security certifications.
Strong communication and interpersonal skills for collaboration with technical and non-technical teams.
Understanding of CVSS and risk assessment methodologies.
Hands-on experience with vulnerability scanning platforms like Qualys, Nessus, or Rapid7 InsightVM.
Strong analytical skills to identify patterns in data.

Python