Vulnerability and Patch Management Engineer
PRINCIPAL DUTIES & RESPONSIBILITIES
· Collaborate with managed security service providers to optimize patch and vulnerability management tools, improving coverage and accuracy.
· Manage and enhance patching processes for Windows Servers, workstations, and cloud environments.
· Actively verify, test, and apply security patches across all systems.
· Conduct routine audits of servers and endpoints to ensure compliance with security standards and configuration guidelines.
· Develop and maintain PowerShell scripts to automate patching and remediation tasks.
· Maintain detailed documentation of patching procedures, system configurations, and change history.
· Lead vulnerability assessments and coordinate remediation efforts with IT and security teams.
· Provide escalation support for server and workstation-related issues.
· Ensure adherence to IT governance, policies, and change management procedures.
· Promote a culture of continuous improvement by identifying new risks and recommending mitigation strategies.
· Mentor and train junior team members on patching and vulnerability management practices.
· Assist in generating reports and metrics for management and board-level review.
JOB SPECIFICATIONS
· Bachelor's or Associate Degree in Computer Science, Cybersecurity, Computer Engineering, or related discipline.
· Minimum of 3 years of hands-on experience in patch management and vulnerability remediation.
· Strong experience with Windows Server environments, endpoint patching, and cloud platforms (e.g., Azure, AWS).
· Familiarity with container security and cloud-native security best practices.
· In-depth understanding of web-based threats and mitigation techniques.
· Proven track record of implementing risk reduction strategies.
· Proficient in PowerShell scripting and automation.
· Strong analytical and problem-solving skills with attention to detail.
· Excellent communication skills, with the ability to convey technical concepts to non-technical stakeholders.
· Relevant certifications (e.g., CompTIA Security+, Microsoft Certified: Azure Security Engineer, CISSP) are a plus.