Vulnerability Management Engineer
Core
Identify, analyze, and drive remediation of security vulnerabilities across Cloudflare's infrastructure and cloud environments to support DOD IL4 and FedRamp compliance.
Role type
Vulnerability Management Engineer
Builds
Secure infrastructure and cloud environments aligned with regulatory assurance requirements
Domain
Cybersecurity / Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability management in regulated environments, DoD IL4 and FedRAMP frameworks, CVSS risk assessment, vulnerability scanning platforms (Qualys, Nessus, Rapid7), technical remediation guidance, risk-based prioritization, backlog management
Preferred skills
Python scripting for automation, JIRA ticketing, infrastructure pentesting tools
Technologies
Qualys, Nessus, Rapid7 InsightVM, JIRA
Responsibilities
Conduct vulnerability scanning and perform in-depth analysis of findings; Triage, validate, and prioritize vulnerabilities using risk-based approaches; Develop and deliver technical remediation guidance; Support DOD IL4 and FedRamp preparation; Embed vulnerability management into delivery pipelines; Track and report remediation progress; Manage remediation backlog; Contribute to continuous improvement of vulnerability management standards
Seniority
Mid-level, hands-on IC
