Key Responsibilities
- Administer and maintain Rapid7 InsightVM, including scan engines, consoles and site configuration
- Run scheduled and on-demand vulnerability scans across servers, endpoints, cloud workloads and network devices
- Validate results, eliminate false positives and assign remediation actions to asset owners
- Track remediation against SLAs and build reporting/dashboards for technical teams and leadership
- Manage automated policies, tags and dynamic asset groups within InsightVM
- Proven hands-on experience with Rapid7 InsightVM / Nexpose in an enterprise environment
- Strong grounding in vulnerability assessment, CVSS scoring and remediation workflows
- Working knowledge of Windows, Linux, network devices and cloud platforms (AWS, Azure, GCP)
- Experience with patch management platforms (SCCM, Intune, BigFix, Tanium or WSUS)
- Strong stakeholder communication, translating technical risk for non-technical audiences
- Experience with automation using PowerShell or Python.
- Familiarity with ServiceNow or similar ITSM/ticketing tools.
- Exposure to compliance frameworks such as ISO 27001, PCI-DSS, or CIS Controls.
