Cyber Security Engineer

We are looking for a Cyber Security Engineer to support a 3-month Contract engagement based in Cedar Rapids, Iowa, with work performed across a hybrid environment that includes on-premises and cloud systems. This role will focus on implementing and optimizing the Rapid7 Insight Platform to strengthen vulnerability management, improve threat visibility, and provide the IT organization with practical guidance for risk reduction. The ideal candidate brings strong hands-on experience with Rapid7 tools and can translate security findings into clear operational next steps for both technical teams and leadership.

Responsibilities:
• Lead the rollout and configuration of Rapid7 InsightVM to assess vulnerabilities across servers, endpoints, and cloud-based assets.
• Set up and refine Rapid7 InsightIDR capabilities to support centralized logging, endpoint monitoring, and threat detection activities.
• Review the environment for additional Rapid7 platform use cases, including application and cloud security modules when appropriate.
• Install and optimize scan engines, collectors, and agents to ensure reliable coverage throughout the hybrid infrastructure.
• Organize asset groupings, define scanning cadences, and establish secure authenticated scanning methods.
• Create risk-based processes for prioritizing findings and guiding remediation efforts based on severity and business impact.
• Develop dashboards, reports, and executive summaries that communicate security posture and progress to varied stakeholders.
• Produce clear technical documentation, operational procedures, and support runbooks to enable ongoing internal maintenance.
• Deliver knowledge transfer sessions for internal IT staff and provide actionable recommendations for a phased remediation roadmap.• At least 3 years of practical experience working with the Rapid7 Insight Platform, including strong expertise with InsightVM.
• Demonstrated success implementing vulnerability management solutions in environments spanning both on-premises infrastructure and cloud platforms.
• Solid understanding of vulnerability assessment practices, risk scoring models, and remediation prioritization methods.
• Experience configuring authenticated scans, managing credentials securely, and deploying scan engines or data collectors.
• Familiarity with Azure security concepts, cloud asset visibility, and enterprise infrastructure components such as Active Directory or Azure AD.
• Working knowledge of cybersecurity operations and related technologies, including firewall platforms and configuration management practices.
• Strong written and verbal communication skills with the ability to explain technical issues to non-technical audiences.
• Industry certifications such as Rapid7 credentials, Security+, or other relevant security certifications are a plus.