Vulnerability Management with Rapid7

Vulnerability Management with Rapid7

Key Responsibilities

• Review and triage the existing backlog of overdue vulnerability remediation tickets.
• Validate vulnerability findings, affected assets, application ownership, support-team ownership, remediation status, and target completion dates.
• Work with infrastructure, application, cloud, database, middleware, endpoint, and other technology teams to coordinate remediation activities.
• Identify tickets that have been incorrectly assigned or that require involvement from multiple support teams.
• Help break down complex or multi-team remediation efforts into clearly defined, trackable actions.
• Ensure vulnerability tickets contain complete and accurate information, including affected hosts, vulnerability details, ownership, remediation requirements, due dates, exceptions, and status updates.
• Follow up with assigned teams to obtain remediation plans, target dates, implementation evidence, and validation of completion.
• Coordinate with vulnerability scanning and security teams to confirm whether vulnerabilities have been successfully remediated or require additional action.
• Identify recurring ownership, CMDB, assignment-group, asset-management, and process gaps that contribute to overdue vulnerabilities.
• Support improvements to ServiceNow workflows, reporting, ticket structures, dashboards, and operating procedures.
• Assist with defining and documenting Vulnerability Management roles, responsibilities, escalation paths, service-level expectations, and governance processes.
• Develop regular backlog reporting for technology leaders, including aging, ownership, risk severity, remediation progress, blockers, and overdue trends.
• Escalate high-risk, significantly overdue, or stalled remediation items through the appropriate management channels.
• Support vulnerability exception and risk-acceptance processes where remediation cannot be completed within the required timeframe.
• Help establish repeatable processes that can be transitioned to internal team members at the conclusion of the engagement.
• Maintain clear documentation of decisions, actions, dependencies, and process improvements.