Position: Rapid7 Vulnerability Management Engineer

Experience: 2–4 years

Location: Dubai, UAE – Onsite

Role Summary:

We are looking for a Cybersecurity Engineer with 2–4 years of hands-on experience in Vulnerability Management, with strong practical experience in Rapid7 InsightVM. The engineer will support the day-to-day operation, administration, monitoring, tuning, and optimization of the Rapid7 vulnerability management environment.

Key Responsibilities:

• Administer, operate, monitor, and maintain Rapid7 InsightVM and associated components.
• Configure and manage Security Console, Scan Engines, Sites, Scan Templates, Credentials, Asset Groups and Insight Agents. The proposed architecture specifically includes Security Console, distributed Scan Engines, and optional Insight Agents. 
• Plan, configure, schedule, and monitor authenticated and unauthenticated vulnerability scans.
• Perform regular vulnerability assessments across servers, network devices, applications, cloud and other IT environments.
• Analyze vulnerabilities, prioritize risks, identify false positives, and support remediation teams.
• Track vulnerabilities through remediation and perform revalidation/rescanning to confirm closure.
• Monitor platform health, scanning performance, coverage, failed scans, authentication failures, and overall operational performance.
• Support integration of Rapid7 with ITSM/incident management, SIEM, GRC, Active Directory/LDAP and credential-management solutions. 
• Configure automated ticketing/remediation workflows and vulnerability reporting.
• Prepare weekly/monthly vulnerability reports, dashboards, SLA/KPI reports and remediation status reports.
• Participate in platform health checks, troubleshooting, upgrades, tuning and continuous service improvement.
• Coordinate with infrastructure, application, network and security teams to drive vulnerability remediation.
• Maintain operational documentation, SOPs, scan configurations and remediation tracking.

Required Skills & Experience:

• 2–4 years of total cybersecurity / vulnerability management experience.
• Minimum 1–2 years of hands-on Rapid7 InsightVM experience strongly preferred.
• Practical experience managing vulnerability scanning in medium/large enterprise environments.
• Good understanding of CVEs, CVSS, vulnerability prioritization, remediation and risk management.
• Knowledge of Windows/Linux, networking, Active Directory and common enterprise infrastructure.
• Experience with authenticated vulnerability scanning and troubleshooting scan/credential issues.
• Understanding of APIs and integration with SIEM/ITSM platforms is an advantage.
• Good reporting, documentation and customer-facing communication skills.
• Ability to work onsite in Dubai and operate as part of a managed-services team.

Preferred Certifications:

Rapid7 certification/training is highly preferred. Security certifications such as Security+, CEH, eJPT or equivalent would be advantageous but should not be mandatory for a 2–4 year profile.

Important screening requirement: Candidates should have real hands-on Rapid7 InsightVM administration experience, not only experience consuming vulnerability reports.