Vulnerability Management with Rapid7

Associates Systems LLC; Irving (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Associates Systems LLC in Irving, TX is seeking a Vulnerability Remediation Coordinator to review and triage the backlog of overdue remediation tickets. You will validate findings, assets, ownership, status, and due dates, coordinating across infrastructure, cloud, databases, and other teams to drive timely remediation.

Responsibilities include ensuring tickets have complete information, following up for remediation plans, coordinating with scanning and security teams, identifying gaps, and

Responsibilities

• Review and triage the backlog of overdue vulnerability remediation tickets.
• Validate vulnerability findings, affected assets, ownership, remediation status, and target completion dates.
• Coordinate remediation activities with infrastructure, application, cloud, database, middleware, endpoint, and other teams.
• Identify tickets that were misassigned or require multi-team involvement.
• Break down complex remediation efforts into clearly defined, trackable actions.
• Ensure tickets contain complete information including hosts, details, ownership, due dates, exceptions, and status.
• Follow up with teams to obtain remediation plans, target dates, evidence, and validation of completion.
• Coordinate with vulnerability scanning and security teams to confirm remediation success or remaining actions.
• Identify recurring gaps in ownership, CMDB, assignment groups, asset management, and processes that cause delays.
• Support improvements to ServiceNow workflows, reporting, ticket structures, dashboards, and operating procedures.
• Assist in defining Vulnerability Management roles, responsibilities, escalation paths, SLAs, and governance processes.
• Develop regular backlog reporting for technology leaders, including aging, ownership, risk severity, remediation progress, blockers, and overdue trends.
• Escalate high-risk or significantly overdue items through appropriate management channels.
• Support exception and risk-acceptance processes when remediation cannot be completed in time.
• Help establish repeatable processes for transition to internal teams after engagement ends.
• Maintain clear documentation of decisions, actions, dependencies, and process improvements.

Job description

• Review and triage the existing backlog of overdue vulnerability remediation tickets.
• Validate vulnerability findings, affected assets, application ownership, support-team ownership, remediation status, and target completion dates.
• Work with infrastructure, application, cloud, database, middleware, endpoint, and other technology teams to coordinate remediation activities.
• Identify tickets that have been incorrectly assigned or that require involvement from multiple support teams.
• Help break down complex or multi-team remediation efforts into clearly defined, trackable actions.
• Ensure vulnerability tickets contain complete and accurate information, including affected hosts, vulnerability details, ownership, remediation requirements, due dates, exceptions, and status updates.
• Follow up with assigned teams to obtain remediation plans, target dates, implementation evidence, and validation of completion.
• Coordinate with vulnerability scanning and security teams to confirm whether vulnerabilities have been successfully remediated or require additional action.
• Identify recurring ownership, CMDB, assignment-group, asset-management, and process gaps that contribute to overdue vulnerabilities.
• Support improvements to ServiceNow workflows, reporting, ticket structures, dashboards, and operating procedures.
• Assist with defining and documenting Vulnerability Management roles, responsibilities, escalation paths, service-level expectations, and governance processes.
• Develop regular backlog reporting for technology leaders, including aging, ownership, risk severity, remediation progress, blockers, and overdue trends.
• Escalate high-risk, significantly overdue, or stalled remediation items through the appropriate management channels.
• Support vulnerability exception and risk-acceptance processes where remediation cannot be completed within the required timeframe.
• Help establish repeatable processes that can be transitioned to internal team members at the conclusion of the engagement.
• Maintain clear documentation of decisions, actions, dependencies, and process improvements.