Sr. Vulnerability Management Engineer with RAPID7 Exp (Min 14 years of Exp needed)

Summary: The Senior Vulnerability Management Engineer is a specialized role responsible for the strategic ownership and management of security vulnerability processes within MNAO. This position involves identifying, prioritizing, and supporting the remediation of security vulnerabilities across various platforms, including enterprise infrastructure and cloud environments. The ideal candidate must have experience with Rapid7 and a background in the automotive domain. The role requires collaboration with multiple teams to ensure compliance and enhance security operations.

Key Responsibilities:

• Perform continuous vulnerability scanning and assessment across enterprise environments including endpoints, servers, cloud platforms, and applications.
• Analyze vulnerability scan results and prioritize remediation activities based on risk, exploitability, asset criticality, and business impact.
• Coordinate remediation activities with infrastructure, desktop, server, network, cloud, and application teams.
• Track vulnerabilities through full remediation lifecycle and ensure compliance with established SLAs.
• Validate remediation activities through rescanning and verification processes.
• Support emergency remediation activities for critical vulnerabilities and zero-day threats.
• Maintain and improve vulnerability management tools and scanning platforms.
• Support deployment and tuning of endpoint security technologies including EDR/XDR solutions.
• Assist in security incident response investigations involving vulnerable or compromised systems.
• Collaborate with SOC teams for threat detection, threat intelligence correlation, and vulnerability exploitation monitoring.
• Support patch management governance and deployment reporting processes.
• Develop automation opportunities to improve vulnerability remediation efficiency.
• Develop operational and executive-level vulnerability management dashboards and reports.
• Track and report KPIs including - Vulnerability aging, SLA compliance, Critical vulnerability exposure, Patch compliance rates, Remediation trends.
• Present risk findings and remediation status to technical teams and leadership.
• Support cybersecurity compliance initiatives aligned with frameworks such as: NIST CSF 2.0, ISO 27001, CIS Controls.
• Assist with audit requests and evidence collection related to vulnerability management and patching.
• Participate in development and maintenance of security policies, standards, and procedures.
• Research emerging threats, vulnerabilities, and industry best practices.
• Recommend security enhancements to reduce attack surface and improve cyber resilience.

Key Skills:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 7+ years of cybersecurity or security engineering experience.
• Hands-on experience with vulnerability management platforms such as: Rapid7, Tenable, Qualys, Microsoft Defender.
• Experience with patch management and endpoint administration.
• Strong understanding of CVSS scoring, Vulnerability prioritization, Common attack techniques, Operating systems and enterprise infrastructure.
• Familiarity with Windows, Linux, Active Directory, cloud environments, and enterprise networking.
• Experience working with SIEM and security monitoring technologies.
• Security Certifications such as: CISSP, Security+, GSEC, CEH (preferred).
• Experience with scripting or automation (PowerShell, Python, Bash) (preferred).
• Experience with cloud security platforms (Azure, AWS, Google Cloud Platform) (preferred).
• Experience supporting enterprise-scale vulnerability remediation programs (preferred).

Salary (Rate): £39.00 hourly

City: undetermined

Country: undetermined

Working Arrangements: remote

IR35 Status: undetermined

Seniority Level: undetermined

Industry: IT

Job Title:   Senior Vulnerability Management Engineer
Location : Remote
Rate: $48-$50/hr on W2 AND $58 - $60 C2C All inc. 
 
===The candidate has the mandatory Rapid7 experience and also comes from the Automotive domain=
 
 Role Summary: Security Operations Engineer (Vulnerability Management Lead) is a specialized role focused on the strategic ownership and day-to-day management of MNAO's security vulnerability management, endpoint security, and security operations. This role is responsible for identifying, prioritizing, tracking, and supporting remediation of security vulnerabilities across enterprise infrastructure, cloud, endpoints, servers, and applications.
 Key Responsibilities:

Qualifications:

Reports to: Cybersecurity Operations Leader