Vulnerability Management Engineer
Cloudflare9 months ago
London, United Kingdom or Austin, TX, USAMid Level
H1B sponsor
Responsibilities
- Conduct vulnerability scanning and analyze findings from Qualys, Nessus, and Rapid7 to validate accuracy, identify patterns, and filter false positives.
- Triage, validate, and prioritize vulnerabilities using CVSS and risk-based assessment methods.
- Develop and deliver technical remediation guidance for application and infrastructure teams.
- Support DoD IL4 and FedRAMP preparation by maintaining compliant vulnerability processes, evidence, reporting, and controls.
- Partner with engineering, infrastructure, cloud, service, and compliance teams to agree remediation actions and timelines.
- Embed vulnerability management into delivery pipelines, operational processes, and change management.
- Use AI-powered security tools and automation to improve triage, pattern recognition, prioritization, and remediation.
- Manage the remediation backlog and report on remediation status and risk reduction.
- Improve vulnerability management standards, procedures, and playbooks.
Requirements
- At least 3 years of vulnerability management experience in a heavily regulated environment.
- Bachelor’s degree in Computer Science, Information Security, or a related security certification.
- Understanding of DoD Impact Level IL4, FedRAMP, SOC 2, and PCI frameworks.
- Strong understanding of CVSS and risk assessment methodologies.
- Hands-on experience with vulnerability scanning platforms such as Qualys, Nessus, and Rapid7 InsightVM.
- Strong analytical, written, verbal, and interpersonal communication skills.
- Experience using AI-powered security tools or generative AI assistants for vulnerability triage, code analysis, or remediation guidance.
- Preferred experience with Python or other scripting languages, JIRA, LLM or AI API integrations, and infrastructure penetration-testing tools.
Benefits
- Medical/Rx, dental, vision, flexible spending, commuter spending, fertility and family-forming, mental health, employee assistance, and global travel medical benefits are offered, with benefits varying outside the United States.
- Financial benefits include short- and long-term disability, life and accident insurance, 401(k), and employee stock participation.
- Flexible paid time off and leave programs are provided.
- The position is based in London, UK, and finalists may be asked to attend an in-person interview at a Cloudflare office or hub.
About Cloudflare
Cloudflare builds a global network that provides CDN, DDoS mitigation, DNS, Zero Trust security, and developer/edge computing tools for organizations of all sizes. It sells subscriptions to its cloud-based platform and usage-based services that protect and accelerate web sites, APIs, and corporate networks, plus serverless apps via Workers. Founded in 2009 and headquartered in San Francisco, it is a public company traded on the NYSE (ticker: NET).