Job Title: Vulnerability remediation (Patch Management) Engineer
Job Location - New York city, New York
Duration: 11 months
Hybrid: 3-4 days
Interview Process: Round 1: Onsite interview at client NY Office
Experience Required: 8–10 Years
Platforms: Windows & Linux
Tools: SCCM, Tanium
· Strong experience in Vulnerability Management
· Strong experience in Patch Management
Preferred OS with both windows and Linux and need to own complete SCCM deployments
Job Summary
We are seeking a skilled Vulnerability remediation (Patch Management) Engineer with 5–8 years of hands-on experience in managing patch deployment and vulnerability remediation across both Windows and Linux environments. The ideal candidate will be responsible for end-to-end patch lifecycle management, including deployment, troubleshooting failures, and ensuring compliance with security standards. Strong working knowledge of SCCM, Tanium, and scripting (PowerShell/Shell) is essential for automation and efficient remediation.
Key Responsibilities
Patch Deployment & Management
- Plan, schedule, and deploy security patches and updates across Windows and Linux systems.
- Use SCCM and Tanium for patch deployment, automation, and reporting.
- Ensure timely patching aligned with organizational security SLAs and compliance requirements.
Vulnerability Assessment & Remediation
- Analyze vulnerability scan outputs and translate them into actionable patching activities.
- Validate findings to eliminate false positives and confirm true risk exposure.
- Provide technical guidance on remediation steps including patching, configuration changes, and compensating controls.
- Prioritize remediation based on severity, exploitability, and business impact.
- Validate patch implementation and ensure vulnerabilities are effectively remediated.
Troubleshooting & Issue Resolution
- Diagnose and resolve patch deployment issues and failures across environments.
- Perform root cause analysis and fix compatibility or system-related issues.
- Coordinate with application and infrastructure teams for issue resolution.
Scripting & Automation
- Develop and use PowerShell and Shell scripts to automate patch deployment, validation, and reporting.
- Improve patching efficiency through automation and process optimization.
Monitoring, Compliance & Reporting
- Track patch compliance and generate reports for security and audit teams.
- Ensure systems meet organizational security and regulatory standards.
- Support audit remediation and security assessments.
Collaboration & Documentation
- Work closely with security, infrastructure, and operations teams for coordinated patching activities.
- Maintain SOPs, patch schedules, and documentation.
- Participate in change management processes and maintenance windows.
Required Skills & Qualifications
- 8–10 years of strong hands-on experience in patch management and vulnerability remediation.
- Drive end-to-end vulnerability remediation, from analysis of findings to closure validation.
- Strong hands-on experience with SCCM and Tanium.
- Good knowledge of Windows and Linux system administration.
- Experience deploying, troubleshooting, and validating patches across environments.
- Work closely with infrastructure, application, cloud, and network teams to remediate vulnerabilities across servers, endpoints, databases, and network devices.
- Strong scripting skills (PowerShell, Shell scripting).
- Familiarity with ITIL-based change and incident management.
- Strong analytical, troubleshooting, and communication skills.
Preferred Skills / Certifications
- Certifications such as CompTIA Security+, CEH, or equivalent.
- Experience with vulnerability tools (Qualys, Tenable, Rapid7).
Exposure to automation frameworks or DevOps practices is an advantage.
