Vulnerability Management Engineer (Rapid7 Certified)

Role Overview

Key Responsibilities

• Administer, operate, monitor, and maintain Rapid7 InsightVM and associated components.
• Configure Security Console, distributed Scan Engines, Sites, Scan Templates, credentials, Asset Groups, and optional Insight Agents.
• Plan, schedule, and monitor authenticated and unauthenticated vulnerability scans.
• Assess vulnerabilities across servers, network devices, applications, cloud environments, and other IT environments.
• Analyze vulnerabilities, prioritize risks, identify false positives, and support remediation teams.
• Track remediation and perform revalidation or rescanning to confirm vulnerability closure.
• Monitor platform health, scanning performance, coverage, failed scans, authentication failures, and operational performance.
• Support integrations with ITSM, incident management, SIEM, GRC, Active Directory or LDAP, and credential-management solutions.
• Configure automated ticketing and remediation workflows and prepare vulnerability reports, dashboards, SLA or KPI reports, and remediation status reports.
• Participate in health checks, troubleshooting, upgrades, tuning, continuous improvement, team coordination, and operational documentation.

Required Skills and Experience

• 2–4 years of total cybersecurity or vulnerability management experience.
• 1–2 years of hands-on Rapid7 InsightVM experience is strongly preferred.
• Practical experience managing vulnerability scanning in medium or large enterprise environments.
• Good understanding of CVEs, CVSS, vulnerability prioritization, remediation, and risk management.
• Knowledge of Windows, Linux, networking, Active Directory, and common enterprise infrastructure.
• Experience with authenticated scanning and troubleshooting scan or credential issues.
• Understanding of APIs and SIEM or ITSM integration is advantageous.
• Good reporting, documentation, and customer-facing communication skills.
• Ability to work onsite in Dubai as part of a managed-services team.

Mandatory Certification

• Rapid7 certification is mandatory.

Workplace

• The role is onsite in Dubai.