Vulnerability remediation (Patch Management) Engineer

Vulnerability remediation (Patch Management) Engineer

Location: New York (Hybrid)

Contract

Experience Required: 8-10 Years

Platforms: Windows & Linux

Tools: SCCM, Tanium

Job Summary

We are seeking a skilled Vulnerability Remediation (Patch Management) Engineer with 5-8 years of hands-on experience managing patch deployment and vulnerability remediation across both Windows and Linux environments. The ideal candidate will be responsible for end-to-end patch lifecycle management, including deployment, troubleshooting failures, and ensuring compliance with security standards. Strong working knowledge of SCCM, Tanium, and scripting (PowerShell/Shell) is essential for automation and efficient remediation.

Key Responsibilities

Patch Deployment & Management

• Plan, schedule, and deploy security patches and updates across Windows and Linux systems.
• Use SCCM and Tanium for patch deployment, automation, and reporting.
• Ensure timely patching aligns with organizational security SLAs and compliance requirements.

Vulnerability Assessment & Remediation

• Analyze vulnerability scan outputs and translate them into actionable patching activities.
• Validate findings to eliminate false positives and confirm true risk exposure.
• Provide technical guidance on remediation steps including patching, configuration changes, and compensating controls.
• Prioritize remediation based on severity, exploitability, and business impact.
• Validate patch implementation and ensure vulnerabilities are effectively remediated.

Troubleshooting & Issue Resolution

• Diagnose and resolve patch deployment issues and failures across environments.
• Perform root cause analysis and fix compatibility or system-related issues.
• Coordinate with application and infrastructure teams for issue resolution.

Scripting & Automation

• Develop and use PowerShell and Shell scripts to automate patch deployment, validation, and reporting.
• Improve patching efficiency through automation and process optimization.

Monitoring, Compliance & Reporting

• Track patch compliance and generate reports for security and audit teams.
• Ensure systems meet organizational security and regulatory standards.
• Support audit remediation and security assessments.

Collaboration & Documentation

• Work closely with security, infrastructure, and operations teams for coordinated patching activities.
• Maintain SOPs, patch schedules, and documentation.
• Participate in change management processes and maintenance windows.

Required Skills & Qualifications

• 8-10 years of strong hands-on experience in patch management and vulnerability remediation.
• Drive end-to-end vulnerability remediation, from analysis of findings to closure validation.
• Strong hands-on experience with SCCM and Tanium.
• Good knowledge of Windows and Linux system administration.
• Experience deploying, troubleshooting, and validating patches across environments.
• Work closely with infrastructure, application, cloud, and network teams to remediate vulnerabilities across servers, endpoints, databases, and network devices.
• Strong scripting skills (PowerShell, Shell scripting).
• Familiarity with ITIL-based change and incident management.
• Strong analytical, troubleshooting, and communication skills.

Preferred Skills / Certifications

• Certifications such as CompTIA Security+, CEH, or equivalent.
• Experience with vulnerability tools (Qualys, Tenable, Rapid7).
• Exposure to automation frameworks or DevOps practices is an advantage.

All your information will be kept confidential according to EEO guidelines.