Latest AI JobsBrowse Jobs
Cloudflare logo

Vulnerability Management Engineer

CloudflareHybridSecurity
Apply on company site
Salary
Not listed
Job type
Full-time
Posted
5 Feb 2026
Status
Open · checked 7d ago

About this role

The Vulnerability Management Engineer at Cloudflare is a hybrid security role based in Austin or London, tasked with safeguarding critical infrastructure and supporting regulatory compliance frameworks. This position is ideal for a detail-oriented professional with a strong background in regulated environments who enjoys leveraging modern AI tools to streamline security operations.

Role Overview

Reporting directly to the Vulnerability Manager, this role focuses on identifying, analyzing, and guiding the remediation of vulnerabilities across Cloudflare's infrastructure and cloud environments. The professional in this position collaborates closely with engineering, infrastructure, cloud, and compliance teams. A major priority of the role involves supporting DOD IL4 and FedRAMP preparation by ensuring that vulnerability management processes, evidence gathering, and tooling align smoothly with rigorous assurance requirements.

Key Responsibilities

Conduct vulnerability scans and execute deep analysis of results from scanning tools such as Qualys, Nessus, and Rapid7 to verify accuracy and filter out false positives.
Triage, validate, and prioritize security issues using risk-based methodologies to gauge real business impact.
Create, document, and deliver technical remediation guidance to help application and infrastructure teams fix issues consistently.
Support DOD IL4 and FedRAMP preparation by aligning processes, reporting, and controls with compliance expectations.
Embed vulnerability management into delivery pipelines, operational processes, and change management workflows alongside engineering teams.
Utilize AI security tools and automation to optimize triage efficiency, pattern recognition, and risk prioritization.
Manage the remediation backlog actively to maintain a sharp focus on risk reduction and measurable progress.
Help improve vulnerability management standards, procedures, and playbooks continually.

Requirements

Solid understanding of DoD Impact Level IL4, FedRAMP, SOC-2, and PCI frameworks.
Minimum of 3 years of vulnerability management experience within a heavily regulated environment.
Bachelor’s degree in Computer Science, Information Security, or holding relevant security certifications.
Strong written and verbal communication skills to work effectively with both technical and non-technical groups.
Deep understanding of CVSS and practical application of risk assessment methodologies in business contexts.
Hands-on background with major vulnerability scanning platforms like Qualys, Nessus, and Rapid7 InsightVM.
Strong analytical skills to spot data patterns and differentiate theoretical risk from true exploitability.
Practical experience using AI-powered security tools or generative AI assistants to accelerate tasks.

Nice to Have

Experience with scripting languages such as Python for automation.
Proficiency with ticketing tools like JIRA for task and ticket management.
Experience integrating LLMs or AI APIs into cybersecurity workflows and automation pipelines.
Hands-on experience utilizing infrastructure penetration testing tools.

Skills and Tools

Vulnerability scanning platforms (Qualys, Nessus, Rapid7 InsightVM)
CVSS and risk assessment methodologies
AI security tools and generative AI assistants
Python scripting (Nice to have)
JIRA for ticketing (Nice to have)
Frameworks: DoD IL4, FedRAMP, SOC-2, PCI

Salary and Benefits

Eligible to participate in Cloudflare’s employee equity plan.
Comprehensive health and welfare coverage including medical, dental, vision, flexible spending accounts, and commuter spending accounts.
Fertility and family-forming benefits alongside on-demand mental health support and an Employee Assistance Program.
Global travel medical insurance, short and long-term disability insurance, and life and accident insurance.
401(k) retirement savings plan and Employee Stock Participation Plan.
Flexible paid time off covering sick leave and vacation, plus comprehensive leave programs like parental, pregnancy health, medical, and bereavement leave.

About the Company

Cloudflare runs one of the world's largest networks, powering and protecting millions of internet properties globally without requiring hardware, software, or code changes. Recognized for its top-tier company culture and innovation, Cloudflare values curiosity over bureaucracy and champions the use of AI to solve tough challenges. The company operates impactful initiatives like Project Galileo, the Athenian Project, and the privacy-focused 1.1.1.1 public DNS resolver to protect a free and open internet.

How to Apply

Interested candidates should visit the official Cloudflare careers page to submit their application for the Vulnerability Management Engineer position.

Skills and tech stack

Python

Questions candidates ask

What locations are available for this hybrid role?

This hybrid position is available in Austin, United States, and London, United Kingdom.

How many years of experience are required?

Candidates must have at least 3 years of vulnerability management experience in a heavily regulated environment.

What compliance frameworks must candidates understand?

Applicants need a solid understanding of DoD Impact Level IL4, FedRAMP, SOC-2, and PCI frameworks.

Are AI tools used in this position?

Yes, the role involves leveraging AI security tools and automation to streamline triage, pattern recognition, and risk prioritization.

Is equity offered for this position?

Yes, this role is eligible to participate in Cloudflare’s equity plan.

Ready to apply?

The application is on the official Cloudflare careers page.

Apply on company site