Vulnerability Management Engineer

Cloudflare
Austin, London
Workplace: HybridFull timeFunction: Data Analytics & Business IntelligenceExperience: 3+ yearsEducation: bachelorsSkills: ["Communication","Team collaboration","Problem-solving"]

Security-focused engineer responsible for identifying, analysing, and remediating vulnerabilities across Cloudflare’s infrastructure and cloud environments. Collaborates with Engineering, Infrastructure, and Compliance to triage and remediate within SLAs, with emphasis on DoD IL4 and FedRAMP readiness and embedding vulnerability management into delivery pipelines.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Cloudflare
Cloudflare
7 months ago

Vulnerability Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 18 hours agoStatus: Live

Job Summary

Security-focused engineer responsible for identifying, analysing, and remediating vulnerabilities across Cloudflare’s infrastructure and cloud environments. Collaborates with Engineering, Infrastructure, and Compliance to triage and remediate within SLAs, with emphasis on DoD IL4 and FedRAMP readiness and embedding vulnerability management into delivery pipelines.
Location: Austin, London
Workplace: Hybrid
Employment Type: Full time
Job Function: Data Analytics & Business Intelligence

Key Responsibilities

  • •Conduct vulnerability scanning, and perform in-depth analysis of findings from scanning tools (e.g., Qualys, Nessus, Rapid7), to verify accuracy, identify systemic patterns, and filter out false positives.
  • •Triage, validate and prioritise vulnerabilities using risk based approaches to determine real business impact, and working with engineering and compliance teams to agree remediation actions and timelines.
  • •Develop, document, and deliver technical remediation guidance and solutions to enable application and infrastructure teams to remediate efficiently and consistently.
  • •Support DoD IL4 and Fedramp preparation, by ensuring vulnerability management processes, evidence, reporting, and controls meet regulatory and assurance expectations.
  • •Work closely with engineering and service teams to embed vulnerability management into delivery pipelines, operational processes and change management.

Key Requirements

  • •Solid understanding of DoD IL4, FedRAMP, SOC-2, and PCI frameworks.
  • •3+ years of Vulnerability Management experience in a heavily regulated environment.
  • •Bachelor's degree in Computer Science, Information Security, or security certifications in a related field.
  • •Strong communication (written and verbal) and interpersonal skills with the ability to collaborate with technical and non-technical teams.
  • •Hands-on experience with vulnerability scanning platforms (e.g., Qualys, Nessus, Rapid7 InsightVM).
Experience:3+ yearsSecurityCybersecurityRegulatory
Education:Bachelor's
Skills:CommunicationTeam collaborationProblem-solving
Languages:English
Tech Stack:QualysNessusRapid7InsightVMPythonJIRACVSS

Company Brief

Cloudflare
Provides a global network and cloud platform that delivers security, performance, and reliability services for web applications, APIs, and Internet properties, including CDN, DDoS protection, DNS, and zero-trust security solutions.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2009
WebsiteLinkedIn