Vulnerability Management with Rapid7

Vulnerability Management with Rapid7

Key Responsibilities

• Review and triage the existing backlog of overdue vulnerability remediation tickets.
• Validate vulnerability findings affected assets application ownership support-team ownership remediation status and target completion dates.
• Work with infrastructure application cloud database middleware endpoint and other technology teams to coordinate remediation activities.
• Identify tickets that have been incorrectly assigned or that require involvement from multiple support teams.
• Help break down complex or multi-team remediation efforts into clearly defined trackable actions.
• Ensure vulnerability tickets contain complete and accurate information including affected hosts vulnerability details ownership remediation requirements due dates exceptions and status updates.
• Follow up with assigned teams to obtain remediation plans target dates implementation evidence and validation of completion.
• Coordinate with vulnerability scanning and security teams to confirm whether vulnerabilities have been successfully remediated or require additional action.
• Identify recurring ownership CMDB assignment-group asset-management and process gaps that contribute to overdue vulnerabilities.
• Support improvements to ServiceNow workflows reporting ticket structures dashboards and operating procedures.
• Assist with defining and documenting Vulnerability Management roles responsibilities escalation paths service-level expectations and governance processes.
• Develop regular backlog reporting for technology leaders including aging ownership risk severity remediation progress blockers and overdue trends.
• Escalate high-risk significantly overdue or stalled remediation items through the appropriate management channels.
• Support vulnerability exception and risk-acceptance processes where remediation cannot be completed within the required timeframe.
• Help establish repeatable processes that can be transitioned to internal team members at the conclusion of the engagement.
• Maintain clear documentation of decisions actions dependencies and process improvements.