Rapid7 Vulnerability Management Engineer

VaporVM; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

VaporVM Ltd. is seeking an experienced vulnerability management specialist to administer and monitor Rapid7 InsightVM and related components.

You will configure, schedule and analyze authenticated and unauthenticated scans across on-premise and cloud environments, prioritizing risks and guiding remediation with IT teams. You will support SIEM/ITSM integrations, generate reports and dashboards, and participate in platform health checks, upgrades and process improvements.

Qualifications

• 2-4 years total cybersecurity/vulnerability management experience.
• 1-2 years hands-on Rapid7 InsightVM experience preferred.
• Experience with vulnerability scanning in medium/large enterprise environments.
• Good understanding of CVEs, CVSS, remediation and risk management.
• Knowledge of Windows/Linux, networking, Active Directory and enterprise infrastructure.
• Experience with authenticated vulnerability scanning and troubleshooting scan/credential issues.
• APIs integration with SIEM/ITSM is a plus.
• Strong reporting, documentation and customer-facing communication skills.
• Ability to work onsite in Dubai as part of a managed-services team.

Responsibilities

• Administer, operate, monitor and maintain Rapid7 InsightVM and components.
• Configure security consoles, scan engines, templates, credentials, asset groups and Insight Agents.
• Plan, schedule and monitor authenticated and unauthenticated vulnerability scans.
• Perform regular vulnerability assessments across servers, networks, apps, cloud and IT environments.
• Analyze vulnerabilities, prioritize risks and support remediation teams.
• Track vulnerabilities through remediation and revalidation scans.
• Monitor platform health, scanning performance and failed scans.
• Coordinate with ITSM/SIEM/Active Directory integrations and automation workflows.
• Prepare vulnerability reports, dashboards and remediation status reports.
• Participate in platform health checks, upgrades and continuous service improvement.

Skills

Vulnerability management

Rapid7 InsightVM

APIs integration (SIEM/ITSM)

Windows/Linux networking basics

Customer-facing communication

Tools

Rapid7 InsightVM

Job description

Administer operate monitor and maintain Rapid7 InsightVM and associated components Configure and manage Security Console Scan Engines Sites Scan Templates Credentials Asset Groups and Insight Agents The proposed architecture specifically includes Security Console distributed Scan Engines and optional Insight Agents Plan configure schedule and monitor authenticated and unauthenticated vulnerability scans Perform regular vulnerability assessments across servers network devices applications cloud and other IT environments Analyze vulnerabilities prioritize risks identify false positives and support remediation teams Track vulnerabilities through remediation and perform revalidation rescanning to confirm closure Monitor platform health scanning performance coverage failed scans authentication failures and overall operational performance Support integration of Rapid7 with ITSM incident management SIEM GRC Active Directory LDAP and credential-management solutions Configure automated ticketing remediation workflows and vulnerability reporting Prepare weekly monthly vulnerability reports dashboards SLA KPI reports and remediation status reports Participate in platform health checks troubleshooting upgrades tuning and continuous service improvement Coordinate with infrastructure application network and security teams to drive vulnerability remediation Maintain operational documentation SOPs scan configurations and remediation tracking

Required Skills & Experience:

• 2 4 years of total cybersecurity / vulnerability management experience.
• Minimum 1 2 years of hands‑on Rapid7 InsightVM experience strongly preferred.
• Practical experience managing vulnerability scanning in medium/large enterprise environments.
• Good understanding of CVEs, CVSS, vulnerability prioritization, remediation and risk management.
• Knowledge of Windows/Linux, networking, Active Directory and common enterprise infrastructure.
• Experience with authenticated vulnerability scanning and troubleshooting scan/credential issues.
• Understanding of APIs and integration with SIEM/ITSM platforms is an advantage.
• Good reporting, documentation and customer-facing communication skills.
• Ability to work onsite in Dubai and operate as part of a managed‑services team.

Preferred Certifications:

• Rapid7 certification/training is highly preferred.
• Security certifications such as Security+, CEH, eJPT or equivalent would be advantageous but should not be mandatory for a 2 4 year profile.
• Candidates should have real hands‑on Rapid7 InsightVM administration experience , not only experience consuming vulnerability reports.