Engineer, Enterprise Patch & Vulnerability Management

Berkley•Wilmington, DE

2d•$90,000 - $127,600

About The Position

The Engineer, Enterprise Patch & Vulnerability Management serves as the technical engineering lead for VIPR (Vulnerability Incident Prevention & Remediation), the enterprise capability responsible for the patch and vulnerability remediation lifecycle across services, applications, platforms, and infrastructure. Reporting to the Sr. Manager, Enterprise Patch & Vulnerability Management, this role leads technical planning, orchestration, and execution of patch-related changes. It partners with BTS technology teams, Cybersecurity, Service Management, Change Management, Application Support, and Operating Unit Technology organizations to ensure patches, vulnerabilities, hardening items, and posture management findings are remediated within established SLAs. The role is accountable for technical change orchestration and execution, AI-based vulnerability and patch analysis, exception review, and incident escalation. Success requires technical breadth across enterprise platforms, strong analytical and troubleshooting skills, operational discipline, and the ability to collaborate with and influence technical teams without direct authority. The position also provides day-to-day technical direction to an offshore execution pod, supports vulnerability remediation and code changes, leads post-patch service validation, and works with SRE, DevOps, Platform Engineering, and product owners to improve automation, tooling, reporting, and documentation.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline; equivalent experience and/or alternative qualifications will be considered.
At least 5 years of technical experience.
At least 3 years of hands-on experience in enterprise patch management, vulnerability remediation, systems engineering, or infrastructure operations.
Experience leading technical execution of enterprise changes and maintenance activities across multiple platforms.
Hands-on experience with patch and vulnerability tooling.
Experience applying AI, analytics, or automation tools to operational or security data.
Working knowledge of public cloud platforms and modern data, integration, platform engineering, DevOps, SRE, and cybersecurity practices.
Patch management engineering skills: planning, sequencing, and safely executing enterprise patch deployments.
Vulnerability management skills: analyzing findings, prioritizing remediation, and driving SLA compliance.
Change orchestration and execution skills across planning, implementation, validation, and rollback.
AI and data analysis skills for applying AI-based tools and analytics to vulnerability, patch, and operational data.
Risk and exception analysis skills to evaluate exposure, compensating controls, and residual risk.
Incident management skills to triage, escalate, and coordinate resolution of patch-related incidents.

Nice To Haves

Automation and scripting skills to improve deployment reliability, reporting, and evidence collection.

Responsibilities

Lead technical orchestration and execution of enterprise patch-related changes, including automated deployment plans, maintenance windows, dependencies, rollback procedures, change records, and coordination during maintenance events.
Coordinate remediation across products on shared maintenance windows to reduce repeated system touchpoints, end-user disruption, and change collisions.
Use AI-enabled tools, analytics, and automation to analyze vulnerability scan data, threat intelligence, and patch information; correlate findings with assets and service owners; assess deployment risk and service impact; identify trends and root causes; and recommend priorities.
Validate AI-generated outputs and ensure their use aligns with BTS security, data, and responsible AI standards.
Review patch and vulnerability exception requests, assess business justifications, compensating controls, residual risk, and remediation timelines, and provide recommendations to the Sr. Manager and Cybersecurity.
Track exceptions through expiration and ensure they are reevaluated and closed in accordance with governance expectations.
Serve as an escalation point for patch-related incidents, failed deployments, and service degradation; triage issues, engage resolver groups, coordinate rollback or remediation, escalate critical issues, and participate in post-incident and problem management reviews.
Provide day-to-day technical direction to the offshore execution pod, including remediation wave planning, handoffs, automated testing, queue prioritization, evidence quality, and off-hours readiness; review work for accuracy and completeness.
Partner with teams to remediate critical, high, medium, and low vulnerabilities, hardening items, and posture management findings across network devices within established SLAs.
Partner with product owners to influence and prioritize code changes needed to remediate vulnerabilities, using AI-based tools to support code analysis, remediation recommendations, and fix validation.
Lead tiered service health validation after remediation, confirm operational readiness, capture evidence, and implement tests when disruption reveals validation gaps.
Partner with SRE, DevOps, Platform Engineering, and product owners to design and improve automated checkout and validation, remediation orchestration, deployment pipelines, and evidence collection using enterprise tools and scripting.
Review and analyze offshore execution pod reporting on patch compliance, vulnerability aging, SLA adherence, deployment success, exception status, and incident trends, providing technical insight for management and executive reporting.
Develop and maintain technical runbooks, standard operating procedures, and knowledge articles; identify opportunities to improve reliability, reduce deployment risk, and expand automation coverage.